2018년 8월 보안 릴리스

(2018년 8월 16일 수정됨) 보안 릴리스를 사용할 수 있습니다.

요약

모든 활성 Node.js 릴리스 라인의 수정 버전을 이제 사용할 수 있습니다. 이번 버전에서는 최초 공지(하단 참고)에서 취약점으로 분류한 부분을 수정하고 OpenSSL을 업그레이드했습니다.

모든 사용자가 최대한 빨리 업그레이드하기를 권장합니다.

다운로드와 릴리스 상세내용

다음 버전을 다운로드할 수 있습니다. 상세한 코드 변경내역도 각 릴리스 페이지에서 볼 수 있습니다.

OpenSSL: 커다란 DH 파라미터로 인한 클라이언트 DoS(CVE-2018-0732)

Node.js가 지원 중인 모든 릴리스 라인은 이번 결함의 영향을 받습니다. OpenSSL 1.1.0i(Node.js 10)와 1.0.2p(Node.js 6 LTS "Boron", Node.js 8 LTS "Carbon") 모두에 패치가 적용되었습니다.

악의적인 서버가 client 연결에 서비스 거부(DoS) 공격을 일으킬 수 있는 문제를 수정했습니다. 클라이언트와 서버가 DH나 DHE(Diffie–Hellman, 일시적(ephemeral) 모드, 비일시적 모드 포함)를 사용하는 암호화 스위트(cipher-suite)를 사용하기로 동의하는 TLS 통신 핸드셰이킹 과정 중에서 악의적인 서버는 아주 큰 소수를 클라이언트에게 보낼 수 있습니다. OpenSSL이 이를 막지 않으므로 클라이언트는 과도하게 긴 시간 동안 키를 생성하도록 강제되면서 서비스 거부가 발생할 수 있습니다.

영향:

  • Node.js 6.x(LTS "Boron")의 모든 버전은 취약합니다.
  • Node.js 8.x(LTS "Carbon")의 모든 버전은 취약합니다.
  • Node.js 10.x(현재 버전)의 모든 버전은 취약합니다.

RSA 키 생성의 캐시 타이밍 취약성(CVE-2018-0737)

Node.js는 RSA 키 생성 기능을 노출하지 않으므로 Node.js는 이 취약성에 영향을 받지 않습니다.

OpenSSL: 로컬 사이드 채널을 통한 ECDSA 키 추출(CVE가 할당되지 않았습니다.)

Node.js가 지원 중인 모든 릴리스 라인은 이번 결함의 영향을 받습니다. OpenSSL 1.1.0i(Node.js 10)와 1.0.2p(Node.js 6 LTS "Boron", Node.js 8 LTS "Carbon") 모두에 패치가 적용되었습니다.

캐시 타이밍을 관찰할 권한이 있는 공격자는 피해자가 다수의 사인을 생성하도록 하고 응답을 감시하면서 DSA나 ECDSA 개인 키를 추출할 수도 있습니다. OpenSSL 정책상 실제적이기보다는 학문적인 로컬에만 적용되는 취약성에는 CVE를 할당하지 않으므로 이 결함은 CVE를 가지지 않습니다. 이 취약성은 NCC Group의 Keegan Ryan이 발견했고 OpenSSL을 포함한 많은 암호 라이브러리가 영향을 받습니다.

영향:

  • Node.js 6.x(LTS "Boron")의 모든 버전은 취약합니다.
  • Node.js 8.x(LTS "Carbon")의 모든 버전은 취약합니다.
  • Node.js 10.x(현재 버전)의 모든 버전은 취약합니다.

초기화되지 않은 메모리의 의도치 않은 노출(CVE-2018-7166)

이 결함은 Node.js 10만 영향을 받습니다. 초기 공지에서는 모든 릴리스 라인이 취약하다고 잘못 알렸습니다.

Node.js TSC 멤버인 Сковорода Никита Андреевич(Nikita Skovoroda / @ChALkeR)가 Buffer.alloc()에서 초기화되지 않은 메모리를 반환하도록 하는 인자 처리 결함을 발견했습니다. 이 메서드는 안전한 메서드여야 하고 초기화되거나 정리된 메모리만을 반환해야 합니다. encoding을 지정하는 세 번째 인자에 숫자로 전달할 수 있는데 이를 Buffer의 내부 "fill" 메서드가 채우는 작업의 start로 잘못 해석하게 됩니다. 이 결함을 통해 Buffer.alloc() 인자를 사용자 입력에서 받는 곳에서는 민감한 정보가 있을 수 있는 정리되지 않은 메모리 블록을 반환하도록 잘못 사용될 수 있습니다.

영향:

  • Node.js 6.x(LTS "Boron")의 모든 버전은 취약하지 않습니다.
  • Node.js 8.x(LTS "Carbon")의 모든 버전은 취약하지 않습니다.
  • Node.js 10.x(현재 버전)의 모든 버전은 취약합니다.

Out of bounds(OOB) 쓰기(CVE-2018-12115)

Node.js가 지원 중인 모든 릴리스 라인은 이번 결함의 영향을 받습니다.

Node.js TSC 멤버인 Сковорода Никита Андреевич(Nikita Skovoroda / @ChALkeR)가 Buffer의 메모리 공간 밖의 메모리에 작성할 수 있는 Buffer의 OOB 쓰기를 발견했습니다. 이는 관련 없는 Buffer 객체를 오염시키거나 Node.js 프로세스에 크래시를 일으킬 수 있습니다.

UCS-2 인코딩('ucs2', 'ucs-2', 'utf16le', 'utf-16le'라는 이름으로 Node.js가 인식하는)으로 사용할 때 Buffer#write()를 통해 단일 Buffer의 경계 밖에 쓰기를 발생시킬 수 있습니다. 버퍼의 끝에서 두 번째 위치에서 시작하는 쓰기가 쓰일 입력 바이트의 최대 길이를 잘못 계산하게 할 수 있습니다.

영향:

  • Node.js 6.x(LTS "Boron")의 모든 버전은 취약합니다.
  • Node.js 8.x(LTS "Carbon")의 모든 버전은 취약합니다.
  • Node.js 10.x(현재 버전)의 모든 버전은 취약합니다.

아래부터는 원래의 글입니다.

요약

Node.js 프로젝트는 지원 중인 모든 릴리스 라인의 새 버전을 2018년 8월 15일(UTC) 정도에 릴리스할 것입니다. 이번 릴리스에는 다수의 보안 수정사항과 OpenSSL의 업그레이드된 버전이 포함되어 있습니다.

이번 릴리스에서 처리되는 모든 결함은 심각도가 낮다고 판단하고 있습니다. 하지만 사용자들은 이 글에서 공개한 정보와 릴리스하면서 공개할 정보를 사용해서 자신의 애플리케이션이 받을 영향의 심각도를 판단해야 합니다.

OpenSSL 1.1.0i와 1.0.2p

OpenSSL팀은 2018년 8월 14일에 OpenSSL 1.1.0i와 1.0.2p를 발표하겠다고 공지했습니다. 이번 릴리스에는 이미 공개된 세 가지 "낮은 심각도"의 보안 수정사항이 포함될 것이고 수정사항은 OpenSSL git 저장소에서 볼 수 있습니다. 이 중 2가지는 Node.js 사용자들과 관련이 있습니다.

  • OpenSSL: 커다란 DH 파라미터로 인한 클라이언트 DoS(CVE-2018-0732)
  • OpenSSL: 로컬 사이드 채널을 통한 ECDSA 키 추출(CVE가 할당되지 않았습니다.)

영향:

  • Node.js 6.x(LTS "Boron")의 모든 버전은 OpenSSL 1.0.2를 통해 영향을 받습니다.
  • Node.js 8.x(LTS "Carbon")의 모든 버전은 OpenSSL 1.0.2를 통해 영향을 받습니다.
  • Node.js 10.x(현재 버전)의 모든 버전은 OpenSSL 1.1.0을 통해 영향을 받습니다.

Node.js 보안 포함사항

  • 초기화되지 않은 메모리의 의도치 않은 노출(CVE-2018-7166)
  • Out of bounds(OOB) 쓰기(CVE-2018-12115)

Node.js가 지원 중인 모든 릴리스 라인은 이 결함의 영향을 받습니다.

추가적인 포함사항

LTS 릴리스 라인의 이번 릴리스에 다음 사항도 포함할 것입니다.

Node.js 10 "현재 버전" 릴리스는 LTS가 아닌 릴리스 라인의 정책에 따라 보안 관련 수정사항으로만 제한되지 않습니다.

릴리스 시기

2018년 8월 15일(UTC) 정도에 릴리스할 것이며 사용자가 영향도 평가를 할 수 있도록 각 릴리스에서 처리한 결함의 상세내용도 같이 공개할 것입니다.

연락처와 차후 업데이트

현재 Node.js 보안 정책은 https://nodejs.org/en/security/에서 볼 수 있습니다.

Node.js의 취약점을 보고하려면 security@nodejs.org로 연락해주세요.

Node.js의 보안 취약점과 보안과 관련된 릴리스의 최신 정보를 얻으려면 https://groups.google.com/forum/#!forum/nodejs-sec에서 소수의 공지만 하는 nodejs-sec 메일링 리스트를 구독해 주세요. 이 프로젝트는 nodejs GitHub 조직에서 관리하고 있습니다.

Node v10.8.0(현재 버전)

주요 변경사항

  • deps:
    • npm을 6.2.0으로 업그레이드했습니다. #21592
      • npm이 이사를 하였습니다. 이번 릴리스에서는 올바른 버그, 지원, PR 위치를 가리키도록 URL을 갱신했습니다.
      • node-gypxcode_emulation에서 사용하는 정규 표현식 매칭이 두 자리 이상의 주버전을 가진 버전 번호도 다룰 수 있도록 수정했습니다. 이 수정이 없으면 XCode 10을 사용하는 환경에서 오류가 발생합니다.
      • npm tree를 상당히 평평하게 했습니다. npm 패키지의 타볼 크기가 8MB에서 4.8MB로 줄었습니다.
      • 변경사항: 6.2.0-next.0, 6.2.0-next.1, 6.2.0.

Commits

  • [335575e49b] - benchmark: remove arrays benchmark (Peter Marshall) #21831
  • [62024b651e] - build: create V8 code cache after script is run (Joyee Cheung) #21567
  • [50ccda2a00] - build: increase macOS minimum supported version (Michaël Zasso) #21883
  • [5e1ceaabaa] - build: remove redundant Makefile target (Rich Trott) #21915
  • [4f00562ef0] - build: add new benchmark targets (Kenny Yuan) #20905
  • [4c5fc5c7ce] - build: move to npm ci where possible (Rich Trott) #21802
  • [e0f3d5703a] - build,win,v8: allow precompiling objects-inl.h (João Reis) #21772
  • [87ed6e6351] - (SEMVER-MINOR) deps: upgrade npm to 6.2.0 (Kat Marchán) #21592
  • [f868415cf6] - deps: cherry-pick 804a693 from upstream V8 (Matheus Marchini) #21855
  • [b56c8ad879] - deps: V8: Backport of 0dd3390 from upstream (James M Snell) #21899
  • [ec0ff7008a] - deps: cherry-pick 907d7bc from upstream V8 (Michaël Zasso) #21838
  • [c23e8b51ea] - deps: cherry-pick 2075910 from upstream V8 (Michaël Zasso) #21838
  • [40fedd3620] - dgram: add getters/setters for private APIs (cjihrig) #21923
  • [98ef8cfb8e] - dgram: make _createSocketHandle() internal only (cjihrig) #21923
  • [ae17d18013] - dgram: hide underscored Socket properties (cjihrig) #21923
  • [b5b74382e0] - dgram: hide _healthCheck() and _stopReceiving() (cjihrig) #21923
  • [b5ae33959b] - doc: add pronouns to readme (Teddy Katz) #22036
  • [f4b6031e39] - doc: clarify text about internal module changes (MaleDong) #22024
  • [1f9570bd10] - doc: add missing worker error (Benjamin Gruenbaum) #21947
  • [67d7a15886] - doc: fix typo in releases.md (Vitor Bruno de Oliveira Barth) #21990
  • [2a0fa4792e] - doc: do not advise to cancel full CI on onboarding (Vse Mozhet Byt) #21977
  • [478dbee8fe] - doc: replace deprecated CI job (Vse Mozhet Byt) #21938
  • [5b0c451e61] - doc: add guide for updating N-API API surface (Hitesh Kanwathirtha) #21877
  • [96bb6052e9] - doc: add node-test-commit-custom-suites to docs (Rich Trott) #21927
  • [c44df51249] - doc: link n-api module init to multi-load addons (Gabriel Schulhof) #21891
  • [c3d9000111] - doc: document http2 network error behaviour (Anna Henningsen) #21861
  • [e8d5787840] - doc: document MODULE_NOT_FOUND error (Jacob Page) #21894
  • [5e562fd792] - doc: fix sorting in the vm.Module section (Vse Mozhet Byt) #21931
  • [eabe907e03] - doc: fix descriptions of sync methods in fs.md (Tim Ruffles) #21747
  • [bd352f0298] - doc: update and improve the release guide (Michaël Zasso) #21868
  • [fd5a0c7a1f] - doc: fix incorrect method name (Anto Aravinth) #21908
  • [af1530e06d] - doc: add cjihrig pronouns (cjihrig) #21901
  • [4d78a21d8c] - doc: add missing require to example in http2.md (Kevin Simper) #21858
  • [ab0da57150] - doc: make minor improvements to collab guide (Rich Trott) #21862
  • [b510cdc756] - doc: fix worker example to receive message (Sakthipriyan Vairamani (thefourtheye)) #21486
  • [d91742aa9a] - fs: reduce memory retention when streaming small files (Anna Henningsen) #21968
  • [484140e223] - fs: stop lazy loading stream constructors (Michaël Zasso) #21776
  • [8799f43fb0] - http: revert "http: always emit close on req and res" (Michaël Zasso) #21809
  • [a5928712c9] - http: name anonymous function in _http_common.js (Petras) #21755
  • [337b2df82f] - http2: release request()'s "connect" event listener after it runs (James Ide) #21916
  • [1e15581823] - http2: remove unused nghttp2 error list (Anna Henningsen) #21827
  • [baf3027c77] - lib: remove usc-2 encoding (Brian White) #21964
  • [9817e405ee] - (SEMVER-MINOR) lib,src: replace all C++ promises with JS promises (Ruben Bridgewater) #20830
  • [45816c50ac] - n-api: guard against cond null dereference (Gabriel Schulhof) #21871
  • [2548f75a92] - src: use UTF-8 for naming interfaces in unix (Ujjwal Sharma) #21926
  • [6b6a26bb8d] - src: use kInternalized instead of kNormal (Ujjwal Sharma) #21926
  • [2c95b96e8e] - src: remove calls to deprecated v8 functions (NewFromUtf8) (Ujjwal Sharma) #21926
  • [e0336b2891] - src: fix may be uninitialized warning in n-api (Michael Dawson) #21898
  • [2f3a28dbf2] - src: use available ReqWrap instance for libuv req (Jon Moss) #21980
  • [80b5c914bb] - src: add proper MemoryInfoName to wrappers (Joyee Cheung) #21939
  • [f6606bf9e4] - src: add missing cmath include to traced_value.cc (Anna Henningsen) #21924
  • [be75795868] - src: don't store one-use strings in variable (Jon Moss) #21876
  • [d9cd171a6b] - src: remove unnecessary else (Jon Moss) #21874
  • [4f8620e2b7] - src: fix formatting of PIDs (Tobias Nießen) #21852
  • [d0f8af021f] - src: use offset calc. instead of req-\>data in node_file (Anna Henningsen) #21839
  • [41ff1bb9c7] - src: prepare for V8 Swallowed Rejection Hook (Benedikt Meurer) #21838
  • [c45623a548] - src: avoid unnecessarily formatting a warning (Tobias Nießen) #21832
  • [6af4f1f515] - stream: name anonymous function in _stream_writable.js (mariotsi) #21753
  • [d0c16f4b2a] - stream: named anonymous functions in _stream_readable.js (Simionescu, Radu) #21750
  • [3d05d82353] - test: improve assertions in child-process-execsync (bhavayAnand9) #22016
  • [62fd84528e] - test: improve inspect readability (Ruben Bridgewater) #21624
  • [fe1823dc21] - test: remove custom AsyncHooksTestConfiguration (Jon Moss) #22008
  • [4510ca349e] - test: add tests for fs/promises chown functions (shisama) #20574
  • [61ae592c4f] - test: remove setTimeout in test-net-connect-unref (conectado) #21969
  • [4958501ac0] - test: remove timeout from test-pipe-stream (Anna Henningsen) #21837
  • [af6b82469d] - test: fix unreliable test-fs-stat-bigint (sagulati) #21949
  • [793a5bb4af] - test: don't fail http2 abort test if 'data' is called multiple times (Sam Ruby) #21925
  • [623ef4961b] - test: address flaky worker test (Rich Trott) #21893
  • [3213c09e3a] - test: provide better message for orphan output documentation (Sam Ruby) #21913
  • [eea199bf98] - test: fix http2 connection abort test (Anna Henningsen) #21861
  • [bea1ee8e8e] - test: make crashOnUnhandleRejection opt-out (Michaël Zasso) #21849
  • [81915632e4] - test: allow tests to pass without internet (Helio Frota) #21909
  • [46d14fc0e8] - test: refactor cluster-net-listen-relative-path (Rich Trott) #21863
  • [756dff498a] - test: refactor test-module-loading assertions (Bruno Pinho) #21833
  • [292aa42bd1] - test: fix faulty relpath test (Gus Caplan) #20954
  • [a086604f8f] - test: remove 3rd arg from to assert.strictEqual() (hectorcoronado) #21828
  • [580071dde4] - tls: named anonymous functions in _tls_wrap.js (prayag21) #21756
  • [0f70017f35] - tls: name anonymous function in tls.js (Kevin Lacabane) #21754
  • [0151486b9d] - tools: patch gyp to avoid xcrun errors (Ujjwal Sharma) #21520
  • [b520216518] - tools: update cpplint to check for inline headers (Ujjwal Sharma) #21521
  • [98d461e8cc] - tools: update ESLint to 5.2.0 (Yuta Hiroto) #21817
  • [ce527d973a] - tools: define xrange() in Python 3 (cclauss) #21945
  • [254aa83174] - tools: remove obsolete entries from license (Rich Trott) #21979
  • [36f8b82697] - tools: flatten apidoc headers (Sam Ruby) #21936
  • [5e71d63bfe] - tools: validate apidoc links (Sam Ruby) #21889
  • [b98bf829d0] - tools: build API TOC using raw headers (Sam Ruby) #21922
  • [5606f0b1f2] - tools: create HTML docs with unified/remark/rehype (Sam Ruby) #21490
  • [f89d194deb] - tools: improve update-eslint.sh (Rich Trott) #21819
  • [6b925ebaba] - tools: make getnodeversion.py python3-compatible (silverwind) #21872
  • [ff5c6dcd1b] - tools: properly convert .gypi in install.py (Michael Achenbach) #21850
  • [02e665c712] - tools,test: remove unused config hooks (Jon Moss) #22010
  • [cfeed2b193] - trace_events: add support for builtin trace (James M Snell) #21899
  • [d7edee4954] - trace_events: add more process metadata (James M Snell) #21785
  • [9a88fe4d5e] - vm: rename vm.Module to vm.SourceTextModule (Gus Caplan) #22007

Windows 32-bit Installer: https://nodejs.org/dist/v10.8.0/node-v10.8.0-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v10.8.0/node-v10.8.0-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v10.8.0/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v10.8.0/win-x64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v10.8.0/node-v10.8.0.pkg
macOS 64-bit Binary: https://nodejs.org/dist/v10.8.0/node-v10.8.0-darwin-x64.tar.gz
Linux 64-bit Binary: https://nodejs.org/dist/v10.8.0/node-v10.8.0-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v10.8.0/node-v10.8.0-linux-ppc64le.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v10.8.0/node-v10.8.0-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v10.8.0/node-v10.8.0-aix-ppc64.tar.gz
SunOS 64-bit Binary: https://nodejs.org/dist/v10.8.0/node-v10.8.0-sunos-x64.tar.xz
ARMv6 32-bit Binary: https://nodejs.org/dist/v10.8.0/node-v10.8.0-linux-armv6l.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v10.8.0/node-v10.8.0-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v10.8.0/node-v10.8.0-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v10.8.0/node-v10.8.0.tar.gz
Other release files: https://nodejs.org/dist/v10.8.0/
Documentation: https://nodejs.org/docs/v10.8.0/api/

SHASUMS

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

b167433b33bddd5839c7ce2a703137b22a888f22a12d5a32b3eca6f78819f557 node-v10.8.0-aix-ppc64.tar.gz
b800d8b55c234b1f7d972e9464b00328a1caea5f86f94fdb5fc88ebbed7852b7 node-v10.8.0-darwin-x64.tar.gz
72480ec4c1e2e0c79a507729d54c76c85daba5346d92350357b703d591d5da30 node-v10.8.0-darwin-x64.tar.xz
9ec6fcbb1fae4295b77a10a1c72096bb598717d24f687f17ee0770dd94ad59bd node-v10.8.0-headers.tar.gz
63805fc9356c49ba61fae315dce98e4f209ce16e6091c811cd354e6615367490 node-v10.8.0-headers.tar.xz
c0af4dfb2eb2b0abf45a0c96bbf00ffc059e4afe7feb9a8611ecfd2442847323 node-v10.8.0-linux-arm64.tar.gz
0333da24d1fe54abac26b0a06437d3336c0fb4816b280507a9851ab3742ef2e4 node-v10.8.0-linux-arm64.tar.xz
053ac8fa67752884c3bff81f997b84b9d36cfa7247850c79bddd5b37973accf1 node-v10.8.0-linux-armv6l.tar.gz
6a0a4609c7a453ca40270a4fc8f33dd9fc4f44aada01201d46eab94dbdf7c0d3 node-v10.8.0-linux-armv6l.tar.xz
452cbc1e148b90272d74eeb64805337b2ca662e5ca3dfcf0c69cdc7bc6913e36 node-v10.8.0-linux-armv7l.tar.gz
cede184b0cf7dd91784345eafe911a196fb5fd01078fb47afa5eda8faf53ddb3 node-v10.8.0-linux-armv7l.tar.xz
39c9c34bf74cc0c125dea1b6c61cb667efaa577d15ee636c2bb5536833957d06 node-v10.8.0-linux-ppc64le.tar.gz
c32eeaddd5289f76d90a33e24684b8dc96761f6776b8a9ad3a9d9e8114516f52 node-v10.8.0-linux-ppc64le.tar.xz
955dd4ce040e73e1032164ba0d836192bbb4939e8258c221903d638bcd284c8f node-v10.8.0-linux-s390x.tar.gz
1a6e3949a6ab971be208c8becfda2c08565d1650270ce8a8161989c469c78586 node-v10.8.0-linux-s390x.tar.xz
d83ea37e53f534996b4477e9a616bfe367f90a62fc50714dcf495f8802090f7b node-v10.8.0-linux-x64.tar.gz
497f3b243d7374ee0fe9ab200b175868b172c3a22282cedc6d7fb0cad82471f0 node-v10.8.0-linux-x64.tar.xz
667f83f5396faea9209120cb2527e273042b72fb9f506def59a43d1c4152df4b node-v10.8.0.pkg
a9ef47744cda2fbd7af073af9e8476f3703df518638133af0899498f3afb3a9e node-v10.8.0-sunos-x64.tar.gz
ed101ac1d6ca216718b2d6ba67c2ab60bc3afbbb7631af19ee652fc6bc9a7293 node-v10.8.0-sunos-x64.tar.xz
5584205b601a5bb0727eb5dd0c9824caf26ce1c02fd157d31e14b3a8765a0c0c node-v10.8.0.tar.gz
97bb21718228fd801c8355c842e764eefda888d3a87de8eb04315c74f546b9bc node-v10.8.0.tar.xz
13568f26465d5a4873ac1d6e82bc7fa50640df2ecf8c0d20220d39ec18d35a12 node-v10.8.0-win-x64.7z
f98575fb551d78691a6f74ca4f9c254bbd9fb62135e9ec0ab7ec8c40a03648b0 node-v10.8.0-win-x64.zip
d45222ab7cee7ab7cb802132d89c9afecdc6c86a8c927a316feb7d46e80bec6c node-v10.8.0-win-x86.7z
6c0637ae91bead8b5f989a776dbe04f3b51fad84ee3c8cc0f3983249cbfc8d73 node-v10.8.0-win-x86.zip
9d03d6bc78d7375fa549005c9b12cf5da4b01ee52b60834107f5f603d82a68f2 node-v10.8.0-x64.msi
8cc3ae7ce876e26994ed87fff72922468ac2b5c3b079f28fa6dc36b0b6dbf134 node-v10.8.0-x86.msi
c66454593d389e89d942f41c13181f6d89cc9fa0d5eb1213fec99434c6527fcd win-x64/node.exe
4649d50cdfc703637f3025f295cbc4be440790769edeb35b4c1614b85867a3f6 win-x64/node.lib
f65a1501cf818aa994a0ec2392aab11fb2f44cd69318f476440da1aa47f78d24 win-x64/node_pdb.7z
9163e0d74788a1a3487a5ba638ee7b9b156392238ccb30f562392091b43b3569 win-x64/node_pdb.zip
dcab6b743da035ffdeb06af2553239a4e522890f1d60b56a2a479dfc6935a353 win-x86/node.exe
3e5e0d53b739903c81e48cdd348205bcd0458d99112a2bcb610b9531b5f1f369 win-x86/node.lib
d05e560471ba4155b4f0c73e1a41927d12ddc1bdccc4afa23951d4c47112b33f win-x86/node_pdb.7z
1a3e60f383a79e7da25cb5bd921b9e0eee66fac7bdde60e59e8bdb84b6f37fc0 win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
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=38nA
-----END PGP SIGNATURE-----

Node v10.7.0(현재 버전)

주요 변경사항

  • console:
    • console.timeLog() 메서드를 구현했습니다. #21312
  • deps:
    • libuv 1.22.0으로 업그레이드했습니다. #21731
    • ICU 62.1(Unicode 11, CLDR 33.1)로 업그레이드했습니다. #21728
  • http:
    • http.requesttimeoutagent 옵션을 둘 다 전달할 수 있게 되었습니다. #21204
  • inspector:
    • require('inspector').console에서 원래의 console API를 노출합니다. #21659
  • napi:
    • bigint 숫자를 다루는 실험적 함수를 지원합니다. #21226
  • process:
    • process.hrtime.bigint() 메서드를 구현했습니다. #21256
    • 시작 시 프로세스의 제목을 설정할 수 있는 명령행 인자 --title을 추가했습니다. #21477
  • trace_events:
    • process_name 메타데이터를 추가했습니다. #21477
  • 새로운 협업자를 추가했습니다.

Commits

  • [8c97ffb2f5] - assert: improve simple assert (Ruben Bridgewater) #21626
  • [9776f1cbef] - benchmark: add n-api function args benchmark (Kenny Yuan) #21555
  • [576f1ea978] - buffer: remove superfluous assignment (Tobias Nießen) #21844
  • [6bb2b5a51d] - build: account for pure C sources in build-addons-napi (Anna Henningsen) #21797
  • [c02fb88936] - build: enabling lto at configure (Octavian Soldea) #21677
  • [2a0862cec9] - console: fix timeEnd() not coercing the input (Ruben Bridgewater) #21779
  • [f3c397cd21] - (SEMVER-MINOR) console: implement timeLog method (Michaël Zasso) #21312
  • [73cafd853c] - console,util: avoid pair array generation in C++ (Anna Henningsen) #20831
  • [d9825c7a16] - crypto: prevent Sign::SignFinal from crashing (Tobias Nießen) #21815
  • [07cce880bf] - crypto: handle OpenSSL error queue in CipherBase (Tobias Nießen) #21288
  • [355c5e3c95] - deps: cherry-pick 555c811 from upstream V8 (Anna Henningsen) #21741
  • [42d75392c5] - deps: patch V8 to 6.7.288.49 (Myles Borins) #21727
  • [6920091488] - deps: upgrade to libuv 1.22.0 (cjihrig) #21731
  • [122ae24f62] - deps: icu 62.1 bump (Unicode 11, CLDR 33.1) (Steven R. Loomis) #21728
  • [a5233c7e17] - deps: cherry-pick 477df06 from upstream v8 (Gus Caplan) #21644
  • [506631a9f9] - doc: fix structure and formatting in inspector.md (Vse Mozhet Byt) #21709
  • [53b587a5af] - doc: add documentation for buffer.byteOffset (Andreas Madsen) #21718
  • [51dfebf9ac] - doc: fix vm.runInNewContext signature (Michaël Zasso) #21824
  • [10f9374ea3] - doc: make markdown input compliant (Sam Ruby) #21780
  • [02982998db] - doc: add my pronoun (Ruben Bridgewater) #21813
  • [ca8c96035a] - doc: update readme with my pronouns (Lance Ball) #21818
  • [d33281b36f] - doc: prevent some redirections (Vse Mozhet Byt) #21811
  • [0de0f89d0c] - doc: add "Edit on GitHub" link (Rich Trott) #21703
  • [7ab6efdb94] - doc: add policy for landing new npm releases (Myles Borins) #21594
  • [3d93273bf7] - doc: add OS X to instead of only macOS (XadillaX) #21033
  • [577d24baa4] - doc: fix module.children description (Travis Fischer) #21672
  • [cd6601b87a] - doc: fix HTTP res 'finish' description (Sergey Zelenov) #21670
  • [51db88b0f1] - doc: fix http2stream.pushStream error doc (Сковорода Никита Андреевич) #21487
  • [6e1917a596] - doc: update changelog with 9.x EOL (Сковорода Никита Андреевич) #21612
  • [cd77d8782a] - doc: improve documentation of fs sync methods (iwko) #21243
  • [1044bafec4] - doc: remove _Node.js style callback_ (Rich Trott) #21701
  • [971679328e] - doc: add codebytere as collaborator (Shelley Vohr) #21700
  • [034fe19862] - doc: add links to inline HTML table (Rich Trott) #21678
  • [04eed2342d] - doc: remove "note that" from fs doc (Rich Trott) #21646
  • [c8d5bab022] - doc: fix doc for napi_create_function (Gabriel Schulhof)
  • [f7aa22a0eb] - doc: improve guide text for CI runs (Rich Trott) #21645
  • [6f8ebc08b9] - doc: unify spelling of backpressure (Thomas Watson) #21630
  • [3fffc7e95f] - errors: fix undefined HTTP2 and tls errors (Shailesh Shekhawat) #21564
  • [b758006c23] - fs: fix fsPromises.lchmod error on non-Mac (Masashi Hirano) #21435
  • [4fa7150962] - fs: support pseudofiles in promises.readFile (Timothy Gu) #21497
  • [bba500d0ea] - (SEMVER-MINOR) http: fix request with option timeout and agent (killagu) #21204
  • [0b3c80ca31] - http2: fix issues with aborted respondWithFile()s (Anna Henningsen) #21561
  • [238ef58841] - http2: remove waitTrailers listener after closing a stream (RidgeA) #21764
  • [07160cd2fd] - http2: order declarations in core.js (Rich Trott) #21689
  • [c88af232c8] - http2: pass incoming set-cookie header as array (Gerhard Stoebich) #21360
  • [2922028362] - (SEMVER-MINOR) inspector: expose original console (Matteo Collina) #21659
  • [b2291296ef] - inspector: split main thread interface from transport (Eugene Ostroukhov) #21182
  • [4ed4bf3bdd] - lib: update punycode to 2.1.1 (Rich Trott) #21768
  • [4433ecbf30] - lib: refactor cli table (Ruben Bridgewater) #20960
  • [92d79212ec] - lib: consolidate redundant require() calls (cjihrig) #21699
  • [ed774b7930] - messaging: fix edge cases with transferring ports (Timothy Gu) #21540
  • [221c8bd58f] - messaging: use actual DOMException for DataCloneError (Timothy Gu) #21540
  • [4f3bbfaaca] - n-api: test uint32 truncation (Gabriel Schulhof) #21722
  • [b8ba003fbf] - n-api: remove experimental gate from status codes (Gabriel Schulhof) #21680
  • [109c59971a] - n-api: create functions directly (Gabriel Schulhof) #21688
  • [cec166e85f] - n-api: restrict exports by version (Kyle Farnung) #19962
  • [3096ee5a4b] - (SEMVER-MINOR) napi: add bigint support (Gus Caplan) #21226
  • [581390c59d] - process: split bootstrappers by threads that can run them (Joyee Cheung) #21378
  • [f1b18ba412] - (SEMVER-MINOR) process: implement process.hrtime.bigint() (Joyee Cheung) #21256
  • [961f6e8623] - process: fix process.exitCode handling for fatalException (Denys Otrishko) #21739
  • [4b613d3976] - repl: make own properties shadow prototype properties (Sam Ruby) #21588
  • [1019c2d317] - src: fix async hooks crashing when there is no node context (Javier Gonzalez) #19134
  • [a9a718696e] - src: make heap snapshot & embedder graph accessible for tests (Anna Henningsen) #21741
  • [5121278f5c] - src: use V8 graph heap snapshot API (Anna Henningsen) #21741
  • [d42dbde1a8] - src: add iteration over all base objects to Environment (Anna Henningsen) #21741
  • [4ed5d1a623] - src: add HandleWrap::AddWrapMethods (Jon Moss) #21769
  • [51d613db2d] - src: start annotating native code side effect (Timothy Gu) #21458
  • [466601f47f] - src: remove .h if -inl.h is already included (Daniel Bevenius) #21381
  • [a68b7dda5f] - src: add node_process.cc (James M Snell) #21105
  • [cb698111c4] - src: add comment on CallbackScope exception behaviour (Anna Henningsen) #21743
  • [712809eb1b] - src: enable more detailed memory tracking (Anna Henningsen) #21742
  • [277077853f] - src: make Environment::is_stopping_worker inline (Jon Moss) #21720
  • [d06305635d] - (SEMVER-MINOR) src: add --title command line argument (James M Snell) #21477
  • [ceec23e6e4] - src: remove using directives from spawn_sync.h (Daniel Bevenius) #21634
  • [3a627c830b] - src: add context-aware init macro and doc (Gabriel Schulhof) #21318
  • [aa5994f2b9] - src,tools: use https://nodejs.org URL when possible. (XhmikosR) #21719
  • [0108ff6b51] - test: add support for NODE_TEST_DIR on a separate mount point (Antoine du HAMEL) #21552
  • [eef975ebae] - test: move inspector test back to parallel, unmark flaky (Anna Henningsen) #21806
  • [67908e9933] - test: fix build warnings in bigint N-API test (Anna Henningsen) #21796
  • [6b72583bf8] - test: refactor test-tls-connect-memleak, move to parallel (Anna Henningsen) #21794
  • [174a9db51a] - test: refactor test-net-connect-memleak, move to parallel (Anna Henningsen) #21794
  • [b338ff54bb] - test: add gc tracking to common API (Anna Henningsen) #21794
  • [4e60ce8f87] - test: fix flaky test-debug-prompt (Rich Trott) #21826
  • [a2edb59870] - test: fix comment of fs.promises write (Ryuichi Sakagami) #21708
  • [32ad163038] - test: add test of fs.promises write for non-string buffers (Ryuichi Sakagami) #21708
  • [7352b72fc9] - test: add heap snapshot tests (Anna Henningsen) #21741
  • [678313d18b] - test: add filehandle sync() and datasync() tests (Masashi Hirano) #20530
  • [a09bdb5847] - test: improve console table error output (Ruben Bridgewater) #20960
  • [600349aaba] - test: refactor process/worker exitCode tests (Denys Otrishko) #21739
  • [15026511b8] - test: remove timer in fs.watchFile() test (Rich Trott) #21694
  • [ae5d5658b9] - test: fix flaky watchFile() (Rich Trott) #21694
  • [ada3f34cd4] - test: fix weird string error (Jon Moss) #21793
  • [f46536be23] - test: fix timeouts when running worker tests with --worker (Anna Henningsen) #21791
  • [f386c0a517] - test: add test for dns.promises.resolve . (Keita Akutsu) #21691
  • [11e9b4ecee] - test: fix parallel/test-tls-env-extra-ca.js (Niicck) #21647
  • [eda7fffba4] - test: swap arguments in strictEqual() (Sohail Rajdev) #21660
  • [194d1955a7] - test: fix test-tls-connect-memleak (Rich Trott) #21681
  • [24f649c8cf] - test: fix pummel/test-net-connect-memleak (Rich Trott) #21658
  • [021dd5404c] - test: remove unnecessary string literals (Jacek Pospychała) #21638
  • [47b10e30c0] - test: replace third argument with comment in strict equals (Developer Davo) #21603
  • [25dac95164] - test: fix args passed to strictEqual (Haroon Khan) #21584
  • [fe9888a34a] - test: check type for Worker filename argument (Masashi Hirano) #21620
  • [9cd5c0ec79] - test: add test for missing dynamic instantiate hook (Michaël Zasso) #21506
  • [dc84858787] - test,util: add missing tests and conditions (MaleDong) #21455
  • [c26ba082ae] - tools: avoid global install of dmn for lint update (Rich Trott) #21744
  • [e030dd7d65] - tools: add no-duplicate-requires rule (Gus Caplan) #21712
  • [b9bbbbe5d1] - tools: build all.json by combining generated JSON (Sam Ruby) #21637
  • [214c608208] - tools: lint doc code examples in strict mode (Vse Mozhet Byt) #21615
  • [27d17d4600] - trace_events: add traced_value.cc/traced_value.h (James M Snell) #21475
  • [c4d7413a15] - (SEMVER-MINOR) trace_events: add process_name metadata (James M Snell) #21477
  • [b0943a655e] - worker: exit after uncaught exception (Denys Otrishko) #21739
  • [25fef3d8d4] - workers: fix invalid exit code in parent upon uncaught exception (Denys Otrishko) #21713
  • [48b16aad47] - zlib: instance-ify two methods (Jon Moss) #21702
  • [dae7130929] - zlib: track memory allocated by zlib (Anna Henningsen) #21608
  • [96dae83713] - zlib: fix memory leak for unused zlib instances (Anna Henningsen) #21607

Windows 32-bit Installer: https://nodejs.org/dist/v10.7.0/node-v10.7.0-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v10.7.0/node-v10.7.0-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v10.7.0/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v10.7.0/win-x64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v10.7.0/node-v10.7.0.pkg
macOS 64-bit Binary: https://nodejs.org/dist/v10.7.0/node-v10.7.0-darwin-x64.tar.gz
Linux 64-bit Binary: https://nodejs.org/dist/v10.7.0/node-v10.7.0-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v10.7.0/node-v10.7.0-linux-ppc64le.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v10.7.0/node-v10.7.0-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v10.7.0/node-v10.7.0-aix-ppc64.tar.gz
SunOS 64-bit Binary: https://nodejs.org/dist/v10.7.0/node-v10.7.0-sunos-x64.tar.xz
ARMv6 32-bit Binary: https://nodejs.org/dist/v10.7.0/node-v10.7.0-linux-armv6l.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v10.7.0/node-v10.7.0-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v10.7.0/node-v10.7.0-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v10.7.0/node-v10.7.0.tar.gz
Other release files: https://nodejs.org/dist/v10.7.0/
Documentation: https://nodejs.org/docs/v10.7.0/api/

SHASUMS

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

fb5d42f64655bf21ffee921a1b1ecad3a7bcbe11d709db054a7f26073ec28e8b node-v10.7.0-aix-ppc64.tar.gz
913473055605c8ae92f46923e6ac400133895aafe7766574fd46899bc6b0c5a4 node-v10.7.0-darwin-x64.tar.gz
9e78dab95f371c5661a4703ba1eb092d44b0caf344f7e4a50bf6a7d40b7633d0 node-v10.7.0-darwin-x64.tar.xz
1e63510037e626c4f2abb1c877e23ab4cc3327d3eee89a3d893031acba9ae4b9 node-v10.7.0-headers.tar.gz
bf451f76fab838b6b53363100e0fef8850bbdbc46254c78da9d771eecece8b91 node-v10.7.0-headers.tar.xz
98211277500f39c10f71417bfb77e422190ff9aa46707cc5d2fd18a8a8b50691 node-v10.7.0-linux-arm64.tar.gz
c23856b3123f9e2cfae3f8b0668019f83e9450ee78dede02a8d43031255b7ba0 node-v10.7.0-linux-arm64.tar.xz
8d517e3ab32717c9ab84b4c91ee694f7b491930d4fd6bcc930e48aa9b9a481c9 node-v10.7.0-linux-armv6l.tar.gz
93cf7f370c58f2368240717553aa64eacdbe69271dcbefd8895cd7830d2aa91a node-v10.7.0-linux-armv6l.tar.xz
d87c26f68169efacf279f10b40171cadaa428bd0135e1ddb431e58e403801ed3 node-v10.7.0-linux-armv7l.tar.gz
ceb65b05e52315997f423e287f42f1293fd64ff0207519d7ecc94336691450ea node-v10.7.0-linux-armv7l.tar.xz
353c4c58980689edb0731151c6ad0a542bbaba3779725e9baeddb47f05acade6 node-v10.7.0-linux-ppc64le.tar.gz
968b24284eda0dc64283650ae2990f50570b0884cf0ee3445ea5c8ead269b6aa node-v10.7.0-linux-ppc64le.tar.xz
c2573fdb33fcfb1ca28426524046623271295960be5094bc8da600e8e6348e84 node-v10.7.0-linux-s390x.tar.gz
709dcc2636720ab856b89fa301810ec0a53296ce5aa1c3539995e1e709d19b69 node-v10.7.0-linux-s390x.tar.xz
7324a356b31833c3a978705640d3736a88ec0146bcc1c7ae8875c41d89d4b4da node-v10.7.0-linux-x64.tar.gz
ad1d44cbe64ef44db5d8d42690a76dd186d6a6f71a3c3d38449757fe73135329 node-v10.7.0-linux-x64.tar.xz
9d6e4b265d9031476092737a24037f12c2d61f70a9bad0822aec07670db8ea0b node-v10.7.0.pkg
1f5f9db1d810517f88cb80a670bd20503e5e6cd3cef20763037693859da2c365 node-v10.7.0-sunos-x64.tar.gz
e7a8b1a66305d7a8ef614118d83b5c21f1536e867159fb37fdeba3fa8a15e0b5 node-v10.7.0-sunos-x64.tar.xz
b9691cbc6e6a2e209a9b8cb88fd942802236dae06652080f582304dbdd505ad2 node-v10.7.0.tar.gz
34ee6946ca67151f35c23115818f0b78233c21b7dff210648d4d6dbb5a1be962 node-v10.7.0.tar.xz
5ac24e0df8c8c43a2bdb751c66258aa4412b48eeae104c4f1bffb8659ded794e node-v10.7.0-win-x64.7z
a0914d4c1fb82f51a03a4f57c66c9ce6a65ccd4f3237706042c55799843f4b14 node-v10.7.0-win-x64.zip
c22ec146a4418998e340664eaea8d9688c573033b45e98962a3d3be0a198946f node-v10.7.0-win-x86.7z
2b69f1d437df3f6e69e8b6bb9a2997986c22e7cdb4bbe8dc49a775f3f74a63fc node-v10.7.0-win-x86.zip
62cf806d164cf6bd57c1ec2cac991c573bc956ff3e674be68115eaf4aac4fea4 node-v10.7.0-x64.msi
12d0e6c79a9222567c43dedfc217ce9b6965b7bf8048cb1256361b8f4535d465 node-v10.7.0-x86.msi
2f1cdb7c4a5517f3a79dfdc4d72e3684ea1f74d9d2b5cb4f80eee8bb28fd69cc win-x64/node.exe
6defad1eea9c9614e538fdc671d6259bda27a8a9297d38f90fd57e2361791dc5 win-x64/node.lib
12f7be34a2382da9a5f7021999e2b726a5b22ac437143b09a02780d4f44f114a win-x64/node_pdb.7z
b911c56feaaf29c570a5e81bc61d59ac1c725a3ab4ddf9ec5efe096e779c6fd6 win-x64/node_pdb.zip
ae59d5a8e22d275a2afb80e6db1eab6178f82a75bfaf6d1208a72c6207002056 win-x86/node.exe
490df044231718978f2b14b86b520cde3ae2c1b82410515db2afb55b22bdbd58 win-x86/node.lib
6bda1a581be9baaeb674b7d7750f4fc7e28b7b0aee0b21004a48cc89322cf4f4 win-x86/node_pdb.7z
de5b6749684d18fdb13b6628ae75aabc5c547dc30b4c362966ce5bb8ba550fa1 win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
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=1lZp
-----END PGP SIGNATURE-----

Node v10.6.0(현재 버전)

주요 변경사항

  • dns:
    • DNS 모듈의 실험적인 Promise 버전이 추가됐습니다. require('dns').promises를 통해 사용해보세요. #21264
  • fs:
    • libuv가 이 기능을 지원함에 따라 fs.lchown의 폐지 예정 상태가 철회됐습니다. #21498
  • lib:
    • ECMAScript 명세에서 Atomics.wake의 이름이 Atomics.notify로 변경되었습니다(참고). 현재 Node.js는 워커(worker) 스레드를 실험적으로 지원하고 있기 때문에 이 변화에 대해 미리 대책을 마련하고 있습니다. 이미 wakenotify라는 별명을 추가했으며 wake가 사용되면 경고가 발생하도록 했습니다. #21413 #21518
  • n-api:
    • 비동기 함수 API를 추가했습니다. #17887
  • util:
    • util.inspect는 이제 검사하는 동안 최대 호출 스택 크기를 초과하더라도 예외 대신 결과를 반환할 수 있습니다. #20725
  • vm:
    • script.createCachedData()를 추가했습니다. 이 API는 현재 폐지 예정 상태인 Script 생성자의 produceCachedData 옵션을 대체합니다. #20300
  • worker:
    • Worker 생성자가 상대 경로를 지원합니다. 경로는 현재 작업 디렉터리에 상대적인 경로로 해석됩니다. #21407

Commits

  • [a526b4e2c7] - atomis: add notify alias (Gus Caplan) #21413
  • [9030e933f4] - benchmark: create napi benchmark directory (Rich Trott) #21046
  • [3d3dbae7d8] - build: remove requirement to re-run ./configure (Anna Henningsen) #21371
  • [a7505c029a] - build: speed up startup with V8 code cache (Joyee Cheung) #21405
  • [7d2fe5d770] - build: improve Travis CI settings (Timothy Gu) #21459
  • [225063184d] - build: fail on instrumentation errors (Benjamin Coe) #21071
  • [6f80e305d0] - build: build addons in parallel on Windows (Bartosz Sosnowski) #21403
  • [42f5ff8346] - build: add crypto check to markdown lint target (Daniel Bevenius) #21326
  • [c214403c1a] - build: fix building with --build-v8-with-gn (Yang Guo) #21330
  • [76ef7acf6d] - (SEMVER-MINOR) build, win: make LTCG optional (Bartosz Sosnowski) #21186
  • [45a83760ec] - crypto: fix UB in computing max message size (Ben Noordhuis) #21462
  • [fefa57a7a4] - crypto: remove outdated comment (Timothy Gu) #21511
  • [e7776c63da] - crypto: refer to correct deprecation id in comment (Michaël Zasso) #21399
  • [b30840da5f] - deps: fix gypi sysroot settings on V8 (Matheus Marchini) #21494
  • [a48d98ef04] - deps: float fix on node-gyp in npm tree (Myles Borins) #21448
  • [fe6d707bc4] - deps: float 0c27d793 from openssl (ECDSA blinding) (Rod Vagg) #21345
  • [f162939c32] - deps: upgrade to libuv 1.21.0 (cjihrig) #21466
  • [62ca2cf21c] - deps: cherry-pick 70c4340 from upstream V8 (Matheus Marchini) #21126
  • [ab27e0e785] - deps: cherry-pick acc336c from upstream V8 (Matheus Marchini) #21126
  • [37a5c8c2ff] - deps: cherry-pick b20faff from upstream V8 (Matheus Marchini) #21126
  • [4663d1c22e] - deps: backport aa6ce3e from upstream V8 (Matheus Marchini) #21126
  • [5d7218965d] - deps: cherry-pick 5dd3395 from upstream V8 (Matheus Marchini) #21386
  • [18179f8ae9] - (SEMVER-MINOR) dns: remove Resolver#cancel() from promises API (cjihrig) #21264
  • [aa864ba4a9] - (SEMVER-MINOR) dns: add promisified dns module (cjihrig) #21264
  • [1d73ba8322] - doc: fix some links (Vse Mozhet Byt) #21619
  • [24bc6ab726] - doc: fix some typos in N-API docs (Vse Mozhet Byt) #21614
  • [cadc74d92d] - doc: fix heading level in errors.md (Vse Mozhet Byt) #21618
  • [eb6dcf2696] - doc: fix typo in fs.md (Hugo Josefson) #21579
  • [e081866f64] - doc: add DataView to appropriate crypto methods (Gerhard Stoebich) #21549
  • [51a434f711] - doc: fix some typos in deprecations.md and vm.md (Vse Mozhet Byt) #21569
  • [0f1d73761d] - doc: fix function name in process.md (Joonas Rouhiainen) #21523
  • [bc28398cbe] - doc: separate unrelated info about child_process.exec() (Charmander) #21516
  • [504c0cdd01] - doc: fix code example and formatting in crypto.md (Victor Belozyorov) #21500
  • [511d610dca] - doc: updated docs to include --experimental-worker flag (Jo Colina) #21461
  • [c050279d23] - doc: add bcoe as collaborator (Benjamin Coe) #21536
  • [f5fc412092] - doc: clarify setServers() methods in dns.md (Shivang Saxena) #21469
  • [4647f61a94] - doc: Improve doc for Http2 headers object (Gerhard Stoebich) #21296
  • [6cca5a8b0e] - doc: update AUTHORS list (Michaël Zasso) #21468
  • [de195d50dd] - doc: update LICENSE file (Rich Trott) #21472
  • [dad782165a] - doc: fix sort in sections, lists, tables of dns.md (Vse Mozhet Byt) #21505
  • [dbd810e5d4] - doc: show options arg to new Worker is optional (Thomas Watson) #21508
  • [23598239d1] - doc: fix HTTP req/res 'close' description (Robert Nagy) #21047
  • [02bc99daa7] - doc: correct parameters, return types in crypto.md (ZaneHannanAU) #21420
  • [5bb6e5c5df] - doc: restore documentation for two error codes (Сковорода Никита Андреевич) #21484
  • [c324b85a15] - doc: sort error codes in errors.md (Сковорода Никита Андреевич) #21485
  • [361e4f250c] - doc: fix list format in cli.md (Vse Mozhet Byt) #21467
  • [8e5104b094] - doc: explain HTTP writeHead()'s fast path behavior (Gireesh Punathil) #21289
  • [8a997a503c] - doc: note synchronous part of child_process.spawn (Jamie Davis) #21234
  • [e94474913e] - doc: add example of using filter with cctest (Daniel Bevenius) #21401
  • [9e3168478c] - doc: fix missing parentPort link in worker_threads (Thomas Watson) #21430
  • [1e5afb7d22] - errors: fix ERR_MISSING_DYNAMIC_INSTANTIATE_HOOK (Сковорода Никита Андреевич) #21493
  • [29299cc50a] - esm: loader hook URL validation and error messages (guybedford) #21352
  • [2e07d4596c] - fs: undeprecate lchown() (cjihrig) #21498
  • [5a71e7941d] - http2: track memory allocated by nghttp2 (Anna Henningsen) #21374
  • [3ba9a445de] - http2: fix memory leak when headers are not emitted (Anna Henningsen) #21373
  • [45fe865fbc] - inspector: use js_app.html as the landing page for chrome devtools (GauthamBanasandra) #21385
  • [d1b750d360] - inspector: add debugging for WebSocket messages (Timothy Gu) #21473
  • [0d98fe6ef9] - lib: fix segfault with --without-intl (Rich Trott) #21589
  • [5cd78ba911] - module: experimental modules runMain separation (guybedford) #21350
  • [c87037286f] - n-api: fix compiler warning (cjihrig) #21597
  • [91384bfe5f] - (SEMVER-MINOR) n-api: add API for asynchronous functions (Gabriel Schulhof) #17887
  • [50f833db07] - net: report uv_tcp_open() errors (cjihrig) #21428
  • [881d99b3e6] - net: validate fds passed to Socket constructor (cjihrig) #21429
  • [0a1e8e0172] - per_context: add warning to Atomics.wake (Gus Caplan) #21518
  • [cd2b80c1f5] - process: avoid using the same fd for ipc and stdio (cjihrig) #21466
  • [2d6b337df9] - process: remove unused arguments in setup() (Joyee Cheung) #21377
  • [1894d6c985] - repl: fix tab completion for object properties with special char (Weijia Wang) #21556
  • [0550a58b08] - src: remove StreamBase::kFlagHasWritev (Anna Henningsen) #21527
  • [a8a7575410] - src: remove extra ReadStop() call (Anna Henningsen) #21528
  • [bb0795a5c5] - src: slightly simplify FSEventWrap (Anna Henningsen) #21533
  • [7acfacbee0] - src: add null check to GetCategoryGroupEnabled() (cjihrig) #21545
  • [eb8d60b447] - src: move context bootstrap to js (Gus Caplan) #21518
  • [54227ee133] - src: add native debugging code to workers (Anna Henningsen) #21423
  • [e0bcb6aa17] - src: avoid common case heap allocation (Ben Noordhuis) #21409
  • [75e07feba8] - src: introduce inspect-brk-node (Daniel Bevenius) #20819
  • [2377aec000] - src: fix debugging for multiple categories (Anna Henningsen) #21422
  • [95fa3c6535] - test: add worker prefix to test-message* tests (Michaël Zasso) #21512
  • [b28fd37a69] - test: fix ESM test (Anna Henningsen) #21605
  • [e7abde44db] - test: add a request-response test for MessageChannel (itaysabato) #21514
  • [623cf11dda] - test: skip non-doc files in test-make-doc checks (Vse Mozhet Byt) #21531
  • [8f1aa3c5e8] - test: use aliases for smart pointers in fixture (Daniel Bevenius) #21419
  • [7e10697ba0] - test: make cctest fixture use node::NewIsolate (Daniel Bevenius) #21419
  • [9f2bf3c1b3] - test: add some test cases for validateOffsetLengthWrite (Keita Akutsu) #21195
  • [245c885abb] - test: fix test-net-socket-constructor (Santiago Gimeno) #21466
  • [357eaf3c95] - test: lint fixes for ESLint update (cjihrig) #20855
  • [bfac7beaf5] - test: move net bytes-per-chunk test to sequential (Rich Trott) #21457
  • [91f111fcb2] - test: remove string error from strictEqual (Fernando Doglio) #21292
  • [2fa49a39e6] - test: add tests for end event of stream.Duplex (Masashi Hirano) #21325
  • [6b40ba11c1] - test: avoid running fsync on directory on AIX (John Barboza) #21298
  • [e038b2fa9a] - test: assert process.setgroups is undefined on windows (Masashi Hirano) #21286
  • [d7ff752e9e] - test: add tests for process.setgroups() (Masashi Hirano) #21286
  • [81046f94ff] - test: move net bytes-per-chunk test to parallel (Anna Henningsen) #21322
  • [9cef72dd21] - test: remove the third string literal argument from assert.strictEqual() (Kevin Thomas) #21406
  • [23f22bc614] - test: check that benchmark tests are minimal (Rich Trott) #21046
  • [29593e20d5] - test: run misc benchmark only once in tests (Rich Trott) #21046
  • [f461ae2f45] - test: move test-benchmark-path to sequential (Rich Trott) #21393
  • [5d6d6fb121] - tools: build all.html by combining generated HTML (Sam Ruby) #21568
  • [21d73a5869] - tools: update ESLint to 5.0.0 (cjihrig) #20855
  • [a1580a0c4e] - tools: fix typo in .eslintrc.js (Christopher Hiller) #21449
  • [7cc979d4d3] - (SEMVER-MINOR) util: recover from maximum call stack size (Ruben Bridgewater) #20725
  • [140836a1bc] - util: fix comment typos (Renée Kooi) #21436
  • [4fc05ac7e1] - (SEMVER-MINOR) vm: add Script.createCodeCache() (Gus Caplan) #20300
  • [97b21862f5] - (SEMVER-MINOR) win, build: generate .sln only when necessary (Bartosz Sosnowski) #21284
  • [ba8ee17de5] - win, build: fix building on 32-bit machines (Bartosz Sosnowski) #21437
  • [206e5bf7af] - worker: support relative paths (itaysabato) #21407
  • [41c4b2c76a] - workers: add test for messagePort.onmessage (Michaël Zasso) #21510
  • [49706b44b7] - workers: replace message types string by constants (Weijia Wang) #21537
  • [fb2592ff12] - workers,trace_events: set thread name for workers (James M Snell) #21246

Windows 32-bit Installer: https://nodejs.org/dist/v10.6.0/node-v10.6.0-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v10.6.0/node-v10.6.0-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v10.6.0/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v10.6.0/win-x64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v10.6.0/node-v10.6.0.pkg
macOS 64-bit Binary: https://nodejs.org/dist/v10.6.0/node-v10.6.0-darwin-x64.tar.gz
Linux 64-bit Binary: https://nodejs.org/dist/v10.6.0/node-v10.6.0-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v10.6.0/node-v10.6.0-linux-ppc64le.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v10.6.0/node-v10.6.0-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v10.6.0/node-v10.6.0-aix-ppc64.tar.gz
SunOS 64-bit Binary: https://nodejs.org/dist/v10.6.0/node-v10.6.0-sunos-x64.tar.xz
ARMv6 32-bit Binary: https://nodejs.org/dist/v10.6.0/node-v10.6.0-linux-armv6l.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v10.6.0/node-v10.6.0-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v10.6.0/node-v10.6.0-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v10.6.0/node-v10.6.0.tar.gz
Other release files: https://nodejs.org/dist/v10.6.0/
Documentation: https://nodejs.org/docs/v10.6.0/api/

SHASUMS

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

ad6c4cc2be5b5427a1d48c61e86778b1f085d74a9c7e140bf5769ef025cf3b3b node-v10.6.0-aix-ppc64.tar.gz
537efef0c6fd998502fa10baf82ee21edf513256cc73575991354e19442d0b69 node-v10.6.0-darwin-x64.tar.gz
c595aa22ac2f49ada5f234c80fc1acb21394c779fea4c25ca644c5330f5edab7 node-v10.6.0-darwin-x64.tar.xz
f94ca20dc42b2fea117b96a3f51011a459bb9c6088cf9d056c1d90d7698eb9a5 node-v10.6.0-headers.tar.gz
4477b5a6ce3bd63e0d3aa695dc044bef26dfad1b9e48bc939c115386ef7dca5d node-v10.6.0-headers.tar.xz
354dc8b855faf57c7561633538a63224aeb19e109144396fae466f570feeb69e node-v10.6.0-linux-arm64.tar.gz
be37aade1c085093e276b5822a05233a1057bcafe77f5b9526dbdf622330c4bb node-v10.6.0-linux-arm64.tar.xz
a672acedb42997e8730f4a52a37ace384605cb5993b8d36b8250c6e662bc6903 node-v10.6.0-linux-armv6l.tar.gz
78ae3b7aab67f2bec636f40bbf452fdc944da750e94b9f6ac7a9bb656b946c7f node-v10.6.0-linux-armv6l.tar.xz
e058834476d06783360d4bce049870a1d36a8a4271a5e7430bac76fa8c214b06 node-v10.6.0-linux-armv7l.tar.gz
f7b107a0569b08ead918172e3db5e1791d5f8b53e423e39cbb2b858f4c766cc0 node-v10.6.0-linux-armv7l.tar.xz
f3f1a15f31ec7e99cb46a19ba9206f0e40410eb184ec18216422807c41f6561a node-v10.6.0-linux-ppc64le.tar.gz
85b2b4cea96a78712ec0e7150743a86ec5b7dba1e401bb79a4890856bcdf447a node-v10.6.0-linux-ppc64le.tar.xz
e9ec0f4f187dacba160bf7ffee6e9902940677809fc14abd0e07bbc691ec8841 node-v10.6.0-linux-s390x.tar.gz
97c7f5186e91d07e5e97b1a30be7f63d57b9c0170aca99185ff907de6f61de10 node-v10.6.0-linux-s390x.tar.xz
c9be65055b9492bad9539acdf31a37f75785f1ad58b6659166233b520a4a9290 node-v10.6.0-linux-x64.tar.gz
cfd47380729f2451169b8900b3bd65e4b9db669d1d540613758cd2ededf7b5e6 node-v10.6.0-linux-x64.tar.xz
d6328c5cdc1751c16c94a34c24f91aa4dd83a1faa6cd335787e0cf9914c80082 node-v10.6.0-sunos-x64.tar.gz
ac251c64c3f08f2f2e98fefcfcb501bd0c04248f7fe58ca1b01e303cf4b8902b node-v10.6.0-sunos-x64.tar.xz
0606d939f864599c14e98600e8b73c889bf79f019150975415ef3b4184200a99 node-v10.6.0-win-x64.7z
0b58e0414d76e48432588910ea682f002ba69d7be88deb3355ceffb2fe472f6d node-v10.6.0-win-x64.zip
2f60af4703b79673b020cfce225806a62fc53951ec626ef6de1df9e2616107d2 node-v10.6.0-win-x86.7z
e8d106b1f91c451eb599f6747701634df2783ade37b079ca3ce6337c1d2e7273 node-v10.6.0-win-x86.zip
c45d18f6e47a8dbcee7ca9c3eb271361cc6bac18b9d809fdd579eebfc4aa89eb node-v10.6.0-x64.msi
7f633b62d43c2449ce012e87b7cc27de342d7d329e665d33a31d7ab3053bf2c6 node-v10.6.0-x86.msi
418f8ee330afc8df760a5003a8a8edd4535b3e729a156134b0da83c486d5c043 node-v10.6.0.pkg
8007ebfabee18ffea0f04dbb8f85e7f4cd0a051f89dbb0e72bce5fcca684b36b node-v10.6.0.tar.gz
1960742a836db36ad1aaf3cc024e79aa067adb8460f981c7ae8409390afc7e8f node-v10.6.0.tar.xz
5fe023c34ebd0511ba19559bce2da17de38815973d3a4dce6a9613c43c10cfa8 win-x64/node.exe
73162b549bba9d446577b333a6161027da71f44ca3079e828fdb0c5422983fd4 win-x64/node.lib
74b5255ef0a63b3258aa3fe345f75f798e22ff994e9fea86be4750449e9c22a9 win-x64/node_pdb.7z
c0b61ebeea8a316ce3cff3220df99f05af174b03e136299a5055d9a204405bc2 win-x64/node_pdb.zip
7c8ddd76f0c6cdb703b156758d61c3b7290490967e3c11991d226d5eb1a6e84b win-x86/node.exe
d97d7224d01205d49274a1eaf3a8484e9eeb289d337ccc63da86ab18f8639350 win-x86/node.lib
1e02c26b1a12173a8bbe3268c3b0b85ef19570ff2a21437b1c12a91133c26cac win-x86/node_pdb.7z
d1cbd83e8127199ffc56e7ced1618984cd1cd535aa56d25b5392557ead6cabfd win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=B+Qf
-----END PGP SIGNATURE-----

Node v10.5.0(현재 버전)

주요 변경사항

  • crypto:
    • crypto.scrypt() 지원을 추가했습니다. #20816
  • fs:
    • fs.statfs.watchFile에 BigInt 지원을 추가했습니다. #20220
    • mode를 인자로 받는 API가 더는 0o777보다 클 때 오류를 던지지 않습니다. #20636 #20975 (수정: #20498)
    • 닫힌 이벤트 감시자에서 발생하는 크래시를 수정했습니다. #20985 (수정: #20297)
  • 워커 스레드:
    • worker_threads 모듈의 --experimental-worker 플래그로 멀티스레딩 지원을 추가했습니다. 이 기능은 실험적이며 언제든 호환성을 깨뜨리는 변경이 발생할 수 있습니다. #20876

Commits

  • [a6986fe8b6] - async_hooks: remove deprecated example (Mathias Buus) #20998
  • [4b9817bf1e] - benchmark: disable only the ESLint rule needing it (Rich Trott) #21133
  • [ecba1c57b1] - (SEMVER-MINOR) benchmark: port cluster/echo to worker (Timothy Gu) #20876
  • [02adb2d62c] - (SEMVER-MINOR) build: expose openssl scrypt functions to addons (Ben Noordhuis) #20816
  • [c3fbac432f] - build: install markdown linter for travis (Richard Lau) #21215
  • [896017b134] - build: build addon tests in parallel (Anna Henningsen) #21155
  • [76927fc734] - build: stop distclean from deleting v8 files (Ujjwal Sharma) #21164
  • [b044256f2a] - build: use LC_ALL of C for maximum compatibility (Rich Trott) #21222
  • [78c7d666fb] - build: don't change locale on smartos (Refael Ackermann) #21220
  • [c688a00a6d] - build: fix 'gas_version' check on localized environments (Evandro Oliveira) #20394
  • [79b3423fb5] - build: initial .travis.yml implementation (Anna Henningsen) #21059
  • [ea4be72f22] - child_process: swallow errors in internal communication (Anatoli Papirovski) #21108
  • [9981220e2a] - crypto: fix behavior of createCipher in wrap mode (Tobias Nießen) #21287
  • [d0cb9cbb35] - (SEMVER-MINOR) crypto: drop Math.pow(), use static exponentation (Ben Noordhuis) #20816
  • [2d9c3cc89d] - (SEMVER-MINOR) crypto: refactor randomBytes() (Ben Noordhuis) #20816
  • [6262fa44d6] - (SEMVER-MINOR) crypto: refactor pbkdf2() and pbkdf2Sync() methods (Ben Noordhuis) #20816
  • [c9b4592dbf] - (SEMVER-MINOR) crypto: add scrypt() and scryptSync() methods (Ben Noordhuis) #20816
  • [495756264a] - (SEMVER-MINOR) crypto: DRY type checking (Ben Noordhuis) #20816
  • [e4a7e0d28b] - deps: float ea7abee from openssl / CVE-2018-0732 (Rod Vagg) #21282
  • [0b90b071c4] - deps: Upgrade node-inspect to 1.11.5 (Jan Krems) #21055
  • [ffc29c12da] - deps: patch V8 to 6.7.288.46 (Myles Borins) #21260
  • [14bb905d18] - deps: V8: cherry-pick a440efb27f from upstream (Yang Guo) #21022
  • [65b9c427ac] - dns: improve setServers() errors and performance (Jamie Davis) #20445
  • [bc20ec0c0f] - doc: eliminate _you_ from N-API doc (Rich Trott) #21382
  • [318d6831bf] - doc: use imperative in COLLABORATOR_GUIDE (Rich Trott) #21340
  • [177a7c06a8] - doc: remove obsolete wiki references from BUILDING (Rich Trott) #21369
  • [15023df050] - doc: add davisjam to collaborators (Jamie Davis) #21273
  • [17c21b67ac] - doc: fix indentation in console.md (Vse Mozhet Byt) #21367
  • [ef74368416] - doc: fix heading of optional console method args (Michaël Zasso) #21311
  • [4f17841c20] - doc: use Class Method label consistently (Rich Trott) #21357
  • [4566ebacf4] - doc: wrap style guide at 80 characters (Rich Trott) #21361
  • [6c41f33571] - doc: wrap pull-requests.md at 80 characters (Rich Trott) #21361
  • [b8213f17cc] - doc: remove linking of url text to url (Rich Trott) #21361
  • [3f78220c2b] - doc: correct styling of _GitHub_ in onboarding doc (Rich Trott) #21361
  • [9e994cb119] - doc: wrap releases.md at 80 chars (Rich Trott) #21361
  • [e00e5e6d5d] - doc: switch the order of Writable and Readable (Joseph Gordon) #21333
  • [e1b571d6b7] - doc: make Deprecation cycle explanation more brief (Rich Trott) #21303
  • [df0f7a3b4d] - doc: clarify async execute callback usage (Michael Dawson) #21217
  • [c5a65594ef] - doc: move 5 collaborators to emeritus status (Rich Trott) #21272
  • [c1d53f86f8] - doc: update NODE_OPTIONS section in cli.md (Vse Mozhet Byt) #21229
  • [13fd09bfa7] - doc: add build wg info to releases.md (Jon Moss) #21275
  • [0da910f9a5] - doc: move Italo A. Casas to Release Emeritus (Myles Borins) #21315
  • [6f7de0b8d9] - doc: trim deprecation level definition text (Rich Trott) #21241
  • [dd2fc90dcf] - doc: fix reference to workerData in worker_threads (Jeremiah Senkpiel) #21180
  • [5e46c16371] - doc: fix type in stream doc (Aliaksei Tuzik) #21178
  • [85dc9ac418] - doc: add Michaël Zasso to Release team (Michaël Zasso) #21114
  • [5fa5ab6c48] - doc: naming function as suggested in addon docs (Tommaso Allevi) #21067
  • [fe5d35123b] - (SEMVER-MINOR) doc: document BigInt support in fs.Stats (Joyee Cheung) #20220
  • [2c4f80ffba] - doc: remove spaces around slashes (Rich Trott) #21140
  • [72e7e1da2d] - doc: alphabetize tls options (Rich Trott) #21139
  • [06ac81e786] - doc: streamline errors.md introductory material (Rich Trott) #21138
  • [73b8975b41] - doc: simplify deprecation language (Rich Trott) #21136
  • [6caa354377] - (SEMVER-MINOR) doc: explain Worker semantics in async_hooks.md (Anna Henningsen) #20876
  • [9f9355d6d2] - doc: fix inconsistent documentation (host vs hostname) (Davis Okoth) #20933
  • [a5c571424a] - doc: document file mode caveats on Windows (Joyee Cheung) #20636
  • [a75e44d135] - esm: ensure require.main for CJS top-level loads (Guy Bedford) #21150
  • [04e8f0749e] - (SEMVER-MINOR) fs: support BigInt in fs.*stat and fs.watchFile (Joyee Cheung) #20220
  • [c09bfd81b7] - fs: do not crash when using a closed fs event watcher (Joyee Cheung) #20985
  • [bacb2cb550] - fs: refactor fs module (James M Snell) #20764
  • [db0bb5214a] - fs: improve fchmod{Sync} validation (cjihrig) #20588
  • [2ffb9d6b5c] - fs: drop duplicate API in promises mode (Сковорода Никита Андреевич) #20559
  • [fc0b3610e2] - fs: don't limit ftruncate() length to 32 bits (cjihrig) #20851
  • [469baa062e] - fs: add length validation to fs.truncate() (cjihrig) #20851
  • [6aade4a765] - http: remove a pair of outdated comments (Mark S. Everitt) #21214
  • [bcaf59c739] - http2: fix memory leak for uncommon headers (Anna Henningsen) #21336
  • [dee250fd77] - http2: safer Http2Session destructor (Anatoli Papirovski) #21194
  • [296fd57324] - inspector: stop dragging platform pointer (Eugene Ostroukhov)
  • [fb71337bdf] - (SEMVER-MINOR) lib: rename checkIsArrayBufferView() (Ben Noordhuis) #20816
  • [f3570f201b] - (SEMVER-MINOR) lib: replace checkUint() with validateInt32() (Ben Noordhuis) #20816
  • [b4b7d368be] - lib: unmask mode_t values with 0o777 (Joyee Cheung) #20975
  • [36e5100a39] - lib: support ranges in validateInt32() (cjihrig) #20588
  • [2fe88d2218] - lib: mask mode_t type of arguments with 0o777 (Joyee Cheung) #20636
  • [a0cfb0c9d4] - lib: add validateInteger() validator (cjihrig) #20851
  • [740d9f1a0e] - lib,src: make StatWatcher a HandleWrap (Anna Henningsen) #21244
  • [a657984109] - lib,src: remove openssl feature conditionals (Ben Noordhuis) #21094
  • [653b20b26d] - loader: remove unused error code in module_job (Gus Caplan) #21354
  • [5d3dfedca2] - meta: remove CODEOWNERS (Rich Trott) #21161
  • [169bff3e9e] - n-api: name CallbackBundle function fields (Anna Henningsen) #21240
  • [1dc9330b3a] - n-api: improve runtime perf of n-api func call (Kenny Yuan) #21072
  • [9047c8182c] - n-api: remove unused napi_env member (Gabriel Schulhof) #21127
  • [18c057ab26] - net: emit 'close' when socket ends before connect (Brett Kiefer) #21290
  • [a3fd1cd8ea] - perf_hooks: remove less useful bootstrap marks (James M Snell) #21247
  • [8fddf591c5] - perf_hooks: set bootstrap complete in only one place (James M Snell) #21247
  • [fc2956d37a] - process: backport process/methods file (Michaël Zasso) #21172
  • [78ad4e9dde] - src: remove unused argc var in node_stat_watcher (Daniel Bevenius) #21337
  • [7fa1344143] - src: use %zx in printf for size_t (Anna Henningsen) #21323
  • [671346ee8f] - src: do proper error checking in AsyncWrap::MakeCallback (Anna Henningsen) #21189
  • [aa468abc4c] - src: unify native symbol inspection code (Anna Henningsen) #21238
  • [e92b89a75d] - src: fix http2 typos (Anatoli Papirovski) #21194
  • [4f01168414] - src: do not persist fs_poll handle in stat_watcher (Anatoli Papirovski) #21093
  • [685b9b2a6a] - src: do not persist timer handle in cares_wrap (Anatoli Papirovski) #21093
  • [4757771db3] - src: add consistency check to node_platform.cc (Anna Henningsen) #21156
  • [8e2e16721b] - src: add node_encoding.cc (James M Snell) #21112
  • [39b38754eb] - src: cleanup beforeExit for consistency (James M Snell) #21113
  • [314b47d1cf] - (SEMVER-MINOR) src: add Env::profiler_idle_notifier_started() (Timothy Gu) #20876
  • [5209ff9562] - (SEMVER-MINOR) src: remove unused fields msg_ and env_ (Daniel Bevenius) #20876
  • [9a734132f9] - (SEMVER-MINOR) src: make handle onclose property a Symbol (Anna Henningsen) #20876
  • [e6f06807b1] - (SEMVER-MINOR) src: simplify handle closing (Anna Henningsen) #20876
  • [65924c70e8] - (SEMVER-MINOR) src: remove unused fields isolate_ (Daniel Bevenius) #20876
  • [de7403f813] - (SEMVER-MINOR) src: cleanup per-isolate state on platform on isolate unregister (Anna Henningsen) #20876
  • [ba17c9e46b] - src: refactor bootstrap to use bootstrap object (James M Snell) #20917
  • [cbdc1fdf44] - src, tools: add check for left leaning pointers (Daniel Bevenius) #21010
  • [935309325b] - test: fix deprecation warning due to util.print (Tobias Nießen) #21265
  • [d7ba75f8aa] - test: add test to check colorMode type of Console (Masashi Hirano) #21248
  • [0b00172df8] - test: removing unnecessary parameter from assert call (djmgit) #21307
  • [dea3ac7bff] - test: improve statwatcher async_hooks test (Anna Henningsen) #21244
  • [792335f712] - test: add workerdata-sharedarraybuffer test (Jeremiah Senkpiel) #21180
  • [e8d15cb149] - test: mark test-inspector-port-zero-cluster flaky (Rich Trott) #21251
  • [688bdfef7f] - test: add crypto check to test-http2-debug (Daniel Bevenius) #21205
  • [2270ab2a12] - test: remove string literals from assert.strictEqual() calls (James Kylstra) #21211
  • [187951c0fc] - test: move inspector-stress-http to sequential (Rich Trott) #21227
  • [bda34ea203] - test: check gc does not resurrect the loop (Anatoli Papirovski) #21093
  • [4d782c4720] - test: improve assert error messages (Hristijan Gjorgjievski) #21160
  • [2655c7b194] - test: mark fs-readfile-tostring-fail flaky for all (Rich Trott) #21177
  • [17954c2b01] - test: improve internal/buffer.js test coverage (Masashi Hirano) #21061
  • [2ff4704447] - test: move test-readuint to test-buffer-readuint (Michaël Zasso) #21170
  • [9c3a7bf076] - test: make url-util-format engine agnostic (Rich Trott) #21141
  • [3d8ec8f85c] - test: make url-parse-invalid-input engine agnostic (Rich Trott) #21132
  • [0b0370f884] - test: remove unref in http2 test (Anatoli Papirovski) #21145
  • [14a017cf8d] - test: apply promises API to fourth appendFile test (Rich Trott) #21131
  • [aa9dbf666b] - test: apply promises API to fourth appendFile test (Rich Trott) #21131
  • [185b9e45d3] - test: apply promises API to third appendFile test (Rich Trott) #21131
  • [c400448e85] - test: improve debug output in trace-events test (Rich Trott) #21120
  • [a4ad9891e3] - test: add test for Linux perf (Matheus Marchini) #20783
  • [e16036c462] - test: create new directory v8-updates (Matheus Marchini) #20783
  • [93ce63c89f] - (SEMVER-MINOR) test: add test against unsupported worker features (Timothy Gu) #20876
  • [94dcdfb898] - test: increase coverage for fs.promises.truncate (Masashi Hirano) #20638
  • [c9cee63179] - test,tools: refactor custom ESLint for readability (Rich Trott) #21134
  • [ed05d9a821] - (SEMVER-MINOR) test,tools: enable running tests under workers (Anna Henningsen) #20876
  • [6285fe94f6] - tools: do not disable quotes rule in .eslintrc.js (Rich Trott) #21338
  • [98346de08c] - tools: lint doc/*.md files (Rich Trott) #21361
  • [521f8f1d95] - tools: add BigInt64Array and BigUint64Array to globals (Joyee Cheung) #21255
  • [a5c386d1ba] - tools: add option to use custom template with js2c.py (Shelley Vohr) #21187
  • [7f70fe83ef] - tools: add BigInt to globals (Nikolai Vavilov) #21237
  • [4e742e379b] - tools: update tooling to work with new macOS CLI … (Rich Trott) #21173
  • [ed2b57bcd5] - tools: remove unused global types from type-parser (Rich Trott) #21135
  • [d46446afc5] - v8: replace Buffer with FastBuffer in deserialize (Ujjwal Sharma) #21196
  • [917960e0a1] - win, build: add documentation support to vcbuild (Bartosz Sosnowski) #19663
  • [03fbc9e749] - (SEMVER-MINOR) worker: rename to worker_threads (Anna Henningsen) #20876
  • [9ad42b766e] - (SEMVER-MINOR) worker: improve error (de)serialization (Anna Henningsen) #20876
  • [6b1a887aa2] - (SEMVER-MINOR) worker: enable stdio (Anna Henningsen) #20876
  • [c97fb91e55] - (SEMVER-MINOR) worker: restrict supported extensions (Timothy Gu) #20876
  • [109c92e8fa] - (SEMVER-MINOR) worker: initial implementation (Anna Henningsen) #20876
  • [d1f372f052] - (SEMVER-MINOR) worker: add SharedArrayBuffer sharing (Anna Henningsen) #20876
  • [f447acd87b] - (SEMVER-MINOR) worker: support MessagePort passing in messages (Anna Henningsen) #20876
  • [337be58ee6] - (SEMVER-MINOR) worker: implement MessagePort and MessageChannel (Anna Henningsen) #20876
  • [4a54ebc3bd] - worker,src: display remaining handles if uv\_loop\_close fails (Anna Henningsen) #21238
  • [529d24e3e8] - Revert "workers,trace_events: set thread name for workers" (James M Snell) #21363
  • [dfb5cf6963] - workers,trace_events: set thread name for workers (James M Snell) #21246

Windows 32-bit Installer: https://nodejs.org/dist/v10.5.0/node-v10.5.0-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v10.5.0/node-v10.5.0-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v10.5.0/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v10.5.0/win-x64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v10.5.0/node-v10.5.0.pkg
macOS 64-bit Binary: https://nodejs.org/dist/v10.5.0/node-v10.5.0-darwin-x64.tar.gz
Linux 64-bit Binary: https://nodejs.org/dist/v10.5.0/node-v10.5.0-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v10.5.0/node-v10.5.0-linux-ppc64le.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v10.5.0/node-v10.5.0-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v10.5.0/node-v10.5.0-aix-ppc64.tar.gz
SunOS 64-bit Binary: https://nodejs.org/dist/v10.5.0/node-v10.5.0-sunos-x64.tar.xz
ARMv6 32-bit Binary: https://nodejs.org/dist/v10.5.0/node-v10.5.0-linux-armv6l.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v10.5.0/node-v10.5.0-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v10.5.0/node-v10.5.0-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v10.5.0/node-v10.5.0.tar.gz
Other release files: https://nodejs.org/dist/v10.5.0/
Documentation: https://nodejs.org/docs/v10.5.0/api/

SHASUMS

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

a4008530bf54dc760206e71d7548977137d488e83081e3153a2ffead9bd9549e node-v10.5.0-aix-ppc64.tar.gz
a85bda6ab91da8595e71736944cbd77c61afe05092217defd0fb74d9f77109f0 node-v10.5.0-darwin-x64.tar.gz
10e7228ca2c2ef3f78262ba62f4a64c655a4fbe8f023e3fb544f6b1b45fdba9a node-v10.5.0-darwin-x64.tar.xz
21ac19364d1fb2c52e61190112cd10573afa896ec87f0352a708dbc0a25354d9 node-v10.5.0-headers.tar.gz
b51795e77e8cef658ca967b995684bdeb9fafbeaf0d352da77019cf4be49e226 node-v10.5.0-headers.tar.xz
2708f77f12966cdf13046c7ac8513fc430be5cbeacc02711d242d65044580d91 node-v10.5.0-linux-arm64.tar.gz
28e6baa2a4ac5b0f0f5adf85489574038d0a4ca48efe76a4e5831b6b222652ba node-v10.5.0-linux-arm64.tar.xz
9178e7b45a1910619c80218e436e6a40cfda77b2292825322fc59c3df761d199 node-v10.5.0-linux-armv6l.tar.gz
cf12d275e9a3034bf79dccb639382363e8596d92ef777a0580210ab9908bd271 node-v10.5.0-linux-armv6l.tar.xz
aa615ba40a931c90faaf468a132a08cc662bc12f64608241ee8892407821f8ac node-v10.5.0-linux-armv7l.tar.gz
08107045cff33962cfeaf0fc18baab7675aa1328f1d56ef41a038f2a5a733424 node-v10.5.0-linux-armv7l.tar.xz
45c0aa657b0764564f79da8c8cab9a42b3f8e81d9f1c57f8cdb276a6f1d195b1 node-v10.5.0-linux-ppc64le.tar.gz
febd42beb6f11ac3cc24f4339276c95e42a9b2ddd6a785e037e5dc8ee3efca29 node-v10.5.0-linux-ppc64le.tar.xz
ca97bd536fdd88675bcf98daa0724622a7964f5da16bb444958284e37eeaaab6 node-v10.5.0-linux-s390x.tar.gz
a9614bbba6a210253cb23cf7f64fa34de9c4c130a16e27ead3c26a69a6d18be1 node-v10.5.0-linux-s390x.tar.xz
5d77d2c68c06404028f063dca0947315570ff5e52e46f67f93ef9f6cdcb1b4a8 node-v10.5.0-linux-x64.tar.gz
8b12be967f5962a8173dca235e1a6f642ee29dcf5fc27697004af898ffeca187 node-v10.5.0-linux-x64.tar.xz
109acb4ada9d96a16f0f5c01acd6485b60e4d5fd865d0be7dff98822251a8314 node-v10.5.0-sunos-x64.tar.gz
7df25dc1a08c06eb3894b786a7a833198c3bf4ffb7d87d7dd20023a61041081d node-v10.5.0-sunos-x64.tar.xz
4c5b360a06d874ae3f7e20fb9aacfa8d2da651a1e27a617c29164e2107514313 node-v10.5.0-win-x64.7z
ce2b1f9976de64bcc0a5ce877edee0d29c4db1ebab5a7fd713afffd661e99e08 node-v10.5.0-win-x64.zip
a50a2853c1b882cdd8a545d5d735064d375725ab3766a8fff1a68c27f27998bd node-v10.5.0-win-x86.7z
25b074ff7af71ad36f21954f67b04ffcf6a78ea32ec8855afbab466f4bbc9a9d node-v10.5.0-win-x86.zip
baee3a34ecbe9040c6da8f01eb61bde563a0458a94401a80dd87229fc938add4 node-v10.5.0-x64.msi
74762c180eacc460769055b6fcfd6cf6168de8e3ae5622b99cc1c1bf59b99c1f node-v10.5.0-x86.msi
6f3d061a0455a4e1b840bcfa0e2c0f5891d4c52bc42f304542e2ea0236b06a29 node-v10.5.0.pkg
2b61828fd32e79ed3e6cb4781dfa0d61d03739e30da2f68b3bab63d7f92a6d8d node-v10.5.0.tar.gz
7b54c543745b0df9ee159571fe989d5bbea58a903c51f7d5ccba4105336b33bc node-v10.5.0.tar.xz
7e9dff3948c2da1236610fca417416b68943c71a8acf7c88469a11cbc504fbe6 win-x64/node.exe
0e4a0c875401941aa47ceb4667684b70035517377d7258c2f1503630c36a9296 win-x64/node.lib
444c7c1c11856b9d7f8aa7d2b2442549b530489f441434896c26f0837b5bb483 win-x64/node_pdb.7z
bebb68e0c4e4cf251e2e51c5dcd51802e5dc5852400a040a009aaf1a88d598ec win-x64/node_pdb.zip
254860635c1bece8ffaf469d446bed112cf78fb9976f3ea28d6335fe6920419a win-x86/node.exe
1839f1081dc6de135458607edcfbaeb98cec6bae553ae929c3e9a5dbdaf7cea1 win-x86/node.lib
a1dfaa9a36e24e84e250d2aa5380ebb0ab25200b1f578b4c86c6fb217fc81a48 win-x86/node_pdb.7z
662e2e0e34fd2898f0dc1e195c4a3108f59bac43efc503a2eb3ac48b761b7d48 win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=D5+A
-----END PGP SIGNATURE-----

2018년 6월 보안 릴리스

(2018년 6월 12일 수정됨) 보안 릴리스를 사용할 수 있습니다.

요약

모든 활성 Node.js 릴리스 라인의 수정 버전을 이제 사용할 수 있습니다. 이번 버전에서는 최초 공지(하단 참고)에서 취약점으로 분류한 부분을 수정했습니다.

모든 사용자가 최대한 빨리 업그레이드하기를 권장합니다.

다운로드와 릴리스 상세내용

HTTP/2의 서비스 거부 취약점(CVE-2018-7161)

8.x이상의 모든 버전에 취약점이 존재하고 심각도는 높음(HIGH)입니다. 공격자가 http2 서버를 제공하는 노드 서버를 망가뜨려서 서비스 거부(DoS)를 일으킬 수 있습니다. 이는 네이티브 코드에서 사용하는 객체가 사용할 수 없게 되었을 때 정리하는 과정에서의 버그를 실행하는 방법으로 http2 서버와 상호작용하면서 공격할 수 있습니다. 이는 http2 구현체를 업데이트해서 수정했습니다. 이슈를 보고한 F5 Networks의 Jordan Zebor에게 감사합니다.

영향:

  • Node.js 6.x(LTS "Boron")의 모든 버전은 취약하지 않습니다.
  • Node.js 8.x(LTS "Carbon")의 모든 버전은 취약합니다.
  • Node.js 9.x의 모든 버전은 취약합니다.
  • Node.js 10.x(현재 버전)의 모든 버전은 취약합니다.

서비스 거부, nghttp2 의존성(CVE-2018-1000168)

9.x이상의 모든 버전에 취약점이 존재하고 심각도는 높음(HIGH)입니다. 특정 조건에서 악의적인 클라이언트가 조작된 ALTSVC 프레임을 보내서 초기화되지 않은 읽기를 일으킬 수 있습니다(이어서 세그먼트 폴트가 발생합니다). 이는 nghttp2를 업데이트해서 수정했습니다. 자세한 내용은 https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/를 참고하세요.

영향:

  • Node.js 6.x(LTS "Boron")의 모든 버전은 취약하지 않습니다.
  • Node.js 8.x(LTS "Carbon")의 모든 버전은 취약하지 않습니다.
  • Node.js 9.x의 모든 버전은 취약합니다.
  • Node.js 10.x(현재 버전)의 모든 버전은 취약합니다.

TLS의 서비스 거부 취약점(CVE-2018-7162)

9.x이상의 모든 버전에 취약점이 존재하고 심각도는 높음(HIGH)입니다. 공격자가 TLS 서버를 지원하는 http 서버를 제공하는 node 프로세스를 망가뜨려서 서비스 거부(DoS)를 일으킬 수 있습니다. 이는 핸드셰이크 과정에서 중복된 혹은 기대하지 않은 메시지를 보내서 공격할 수 있습니다. 이 취약점은 TLS 구현체를 업데이트해서 수정했습니다. Node.js 팀과 함께 이 이슈를 살펴볼 수 있게 도와준 F5 Networks의 Jordan Zebor에게 감사합니다.

영향:

  • Node.js 6.x(LTS "Boron")의 모든 버전은 취약하지 않습니다.
  • Node.js 8.x(LTS "Carbon")의 모든 버전은 취약하지 않습니다.
  • Node.js 9.x의 모든 버전은 취약합니다.
  • Node.js 10.x(현재 버전)의 모든 버전은 취약합니다.

v9.x의 메모리 소진 DoS(CVE-2018-7164)

9.7.0 이상의 모든 버전에 취약점이 존재하고 심각도는 중간(MEDIUM)입니다. 9.7.0에서 발생한 이 버그는 net.Socket 객체를 직접 사용해서 스트림으로 네트워크에서 JavaScript로 읽을 때 소비 메모리가 증가합니다. 공격자는 이 버그를 이용해서 짧은 간격으로 작은 청크의 데이터를 계속 보내면 서비스 거부를 일으킬 수 있습니다. 이 취약점은 이전 동작으로 되돌려서 수정했습니다.

영향:

  • Node.js 6.x(LTS "Boron")의 모든 버전은 취약하지 않습니다.
  • Node.js 8.x(LTS "Carbon")의 모든 버전은 취약하지 않습니다.
  • Node.js 9.7.0 이상의 모든 버전은 취약합니다.
  • Node.js 10.x(현재 버전)의 모든 버전은 취약합니다.

Buffer.fill()이나 Buffer.alloc()을 호출하면 행이 걸릴 수 있습니다(CVE-2018-7167)

Buffer.fill()이나 Buffer.alloc()을 일부 파라미터로 호출했을 때 행이 걸려서 서비스 거부가 일어날 수 있습니다. 다음 예제는 행이 걸리는 경우를 보여줍니다.

  • Buffer.alloc(100).fill(Buffer.alloc(0))
  • Buffer.alloc(100).fill(Buffer.from(''))
  • Buffer.alloc(100).fill(new Uint8Array([]))
  • Buffer.alloc(100, Buffer.alloc(0))
  • Buffer.alloc(100, new Uint8Array([]))
  • new Buffer(10).fill(new Buffer(''))

이 취약점을 수정하기 위해 Buffer.alloc()과 Buffer.fill()의 구현체를 업데이트해서 이럴 때 행이 걸리지 않고 0으로 채워지도록 했습니다.

  • Node.js 6.x(LTS "Boron")의 모든 버전은 취약합니다.
  • Node.js 8.x(LTS "Carbon")의 모든 버전은 취약합니다.
  • Node.js 9.x의 모든 버전은 취약합니다.
  • Node.js 10.x(현재 버전)의 모든 버전은 취약하지 않습니다.

아래부터는 원래의 글입니다.

요약

Node.js 프로젝트는 지원 중인 모든 릴리스 라인의 새 버전을 2018년 6월 12일(UTC) 정도에 릴리스할 것입니다. 이번 릴리스에는 다수의 보안 수정사항이 포함되어 있습니다.

영향

  • Node.js 6.x(LTS "Boron")의 모든 버전에는 심각도가 낮은(LOW) 하나의 서비스 거부(DoS) 취약점이 존재합니다.
  • Node.js 8.x(LTS "Carbon")의 모든 버전에는 두 개의 서비스 거부(DoS) 취약점이 존재하고 가장 높은 심각도는 높음(HIGH)입니다.(노트 이는 3개의 취약점이라고 해야 합니다.)
  • Node.js 9.x의 모든 보전에는 5개의 서비스 거부(DoS) 취약점이 존재하고 가장 높은 심각도는 높음(HIGH)입니다.
  • Node.js 10.x(현재 버전)의 모든 버전은 4개의 서비스 거부(DoS) 취약점이 존재하고 가장 높은 심각도는 높음(HIGH)입니다.

릴리스 시기

2018년 6월 12일(UTC) 정도에 릴리스할 것이며 사용자가 영향도 평가를 할 수 있도록 각 릴리스에서 처리한 결함의 상세내용도 같이 공개할 것입니다.

연락처와 차후 업데이트

현재 Node.js 보안 정책은 https://nodejs.org/en/security/에서 볼 수 있습니다.

Node.js의 취약점을 보고하려면 security@nodejs.org로 연락해주세요.

Node.js의 보안 취약점과 보안과 관련된 릴리스의 최신 정보를 얻으려면 https://groups.google.com/forum/#!forum/nodejs-sec에서 소수의 공지만 하는 nodejs-sec 메일링 리스트를 구독해 주세요. 이 프로젝트는 nodejs GitHub 조직에서 관리하고 있습니다.

Node v9.11.2(현재 버전)

주요 변경사항

  • 메모리 소진 DoS 수정 (CVE-2018-7164): net.Socket 객체를 직접 사용해서 스트림으로 네트워크에서 JavaScript로 읽을 때 소비 메모리가 증가하는 9.7.0에서 발생한 버그를 수정했습니다.
  • buffer (CVE-2018-7167): 행이 걸릴 수 있는 Buffer.fill()을 호출했을 때의 서비스 거부 취약점을 수정했습니다.
  • http2
    • (CVE-2018-7161): 정리 중 특정 상황에서 크래시가 발생하지 않도록 http2 구현체를 업데이트해서 서비스 거부 취약점을 수정했습니다.
    • (CVE-2018-1000168): nghttp2를 1.32.0으로 업그레이드해서 서비스 거부 취약점을 수정했습니다.
  • tls (CVE-2018-7162): 메시지를 받을 때 크래시가 발생하지 않도록 TLS 구현체를 업데이트해서 서비스 거부 취약점을 수정했습니다.

Commits

Windows 32-bit Installer: https://nodejs.org/dist/v9.11.2/node-v9.11.2-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v9.11.2/node-v9.11.2-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v9.11.2/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v9.11.2/win-x64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v9.11.2/node-v9.11.2.pkg
macOS 64-bit Binary: https://nodejs.org/dist/v9.11.2/node-v9.11.2-darwin-x64.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v9.11.2/node-v9.11.2-linux-x86.tar.xz
Linux 64-bit Binary: https://nodejs.org/dist/v9.11.2/node-v9.11.2-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v9.11.2/node-v9.11.2-linux-ppc64le.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v9.11.2/node-v9.11.2-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v9.11.2/node-v9.11.2-aix-ppc64.tar.gz
SunOS 32-bit Binary: https://nodejs.org/dist/v9.11.2/node-v9.11.2-sunos-x86.tar.xz
SunOS 64-bit Binary: https://nodejs.org/dist/v9.11.2/node-v9.11.2-sunos-x64.tar.xz
ARMv6 32-bit Binary: https://nodejs.org/dist/v9.11.2/node-v9.11.2-linux-armv6l.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v9.11.2/node-v9.11.2-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v9.11.2/node-v9.11.2-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v9.11.2/node-v9.11.2.tar.gz
Other release files: https://nodejs.org/dist/v9.11.2/
Documentation: https://nodejs.org/docs/v9.11.2/api/

SHASUMS

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

b2a6ce3c9161436e5219748f42c7ce2d0cbc9a1ab05ee404d47a39115da0181f node-v9.11.2-aix-ppc64.tar.gz
340993096108d1dc0e0b598560d87ec645fc94b0fc83a423c36343f2da45f4b8 node-v9.11.2-darwin-x64.tar.gz
9f2441d902d3dd6c02a21099ee1f579a91bd55916c925a1ab7a3b9011fe7dda6 node-v9.11.2-darwin-x64.tar.xz
48a88d158dc83aa211e6fb59aeacb535c9a791f3b7ad8e6d041ada5c43c02a19 node-v9.11.2-headers.tar.gz
a1112577b10108c0499a38740fed60fa0379cdd3fd0d25adaf33a5e3a64ab22e node-v9.11.2-headers.tar.xz
78f600a8690ae34aac8079142c77bb0f0f09c6ddea2272b9a135285610ad71d1 node-v9.11.2-linux-arm64.tar.gz
9a713a6f4473425b83bf67e13e4b3c9f1f683c996b913f1f6854d208996367b6 node-v9.11.2-linux-arm64.tar.xz
d784e5c862c1e34ce241c57ceaac4dc8242ec038b0d315d26a89fd620b82be06 node-v9.11.2-linux-armv6l.tar.gz
21b789165d04a205ed914ee6ddd59099a6bc7cb0c5435079a44978243a98d152 node-v9.11.2-linux-armv6l.tar.xz
319b64f32ffd43d66eb97abecdd14d2f74217142e1bf33192accd9e49c9c98e4 node-v9.11.2-linux-armv7l.tar.gz
9e00140edde72b8a9ff7dd110e80655e268583ec2e32a0fc73d32f942bc6e382 node-v9.11.2-linux-armv7l.tar.xz
00f1ff033fa728a0c516be08b06c46e5eea1155b8d1ee944ae6f96739dd559a7 node-v9.11.2-linux-ppc64le.tar.gz
55daf9d83072b0a36e599210fb51427fcbdd81821e0b06efa7bd9fae039d6564 node-v9.11.2-linux-ppc64le.tar.xz
6b6391abf64f6ff10c64fb98d4e77580f2d9d0104e959fab6551d40b7007e62c node-v9.11.2-linux-s390x.tar.gz
7e7c7b88615bd6df3c8846a6034f595e7c367d30985596cbbfedafeb436e9a92 node-v9.11.2-linux-s390x.tar.xz
bbb46f86c64abe96ee98faa733424fc76f20a38d12f59bdcd60057efa5f1ce89 node-v9.11.2-linux-x64.tar.gz
a2e7fe4ee3c4e3f31e00dff241c92c2ed779a9f36735578603d2be966f938a4b node-v9.11.2-linux-x64.tar.xz
166cc28bd9c8217c533b2921edd5e980b14f1d670d828e9d40c1d5b37f51496d node-v9.11.2-linux-x86.tar.gz
b4ba2b95e6a8a22dcfd7f402f25710719e67af144d32a003b538d05a57626b00 node-v9.11.2-linux-x86.tar.xz
276f82d8742e7069d47667cec243305d587534a74a7aa8a6b7d92df98767f53b node-v9.11.2.pkg
079dabdc51bf9210b5844cebe6b88e4a2597698e59364362977a698d471a22a2 node-v9.11.2-sunos-x64.tar.gz
de46c7a599d76a57781aa22a350909859fd1b204ae4fe6f31143df96fc8e40de node-v9.11.2-sunos-x64.tar.xz
b195eca0163a2f90bf88ad00ad4233293a4d00080b05441df5ac4eb0728f420c node-v9.11.2-sunos-x86.tar.gz
2316a57b45f7ad1a3a2bf665dfb491b32a48f20151a67fe1c5e0a5d023dfddad node-v9.11.2-sunos-x86.tar.xz
4a9cf0bfdf6a0e8c454d21517f70fc2c05a99d7055571826939096172a7040f6 node-v9.11.2.tar.gz
06484eac7f6b7c87e96983a039422347c0047284bc4d373d90884ae3966dc213 node-v9.11.2.tar.xz
46f9d8584a16d61c02c81ef5eb5bf00793fa94ff35647e9549453992abf91c81 node-v9.11.2-win-x64.7z
051db8f4d3c0503e3082173f16b25e2362de8f9a5e509c403992b2069d826c25 node-v9.11.2-win-x64.zip
a7451b05db2a28ebdc095a31e79ec55ae1aae40ad701827d0013b884492ddffc node-v9.11.2-win-x86.7z
e9f55afb5a22b8289880836e59eb13ed012d16e235a81315018a7ce3a12498c2 node-v9.11.2-win-x86.zip
6a9a125a01e377063b11578cd033163068b0f1a0f030907cbbc32db3b9b18c1d node-v9.11.2-x64.msi
82982c3322fb8c25eda90acbecb5a07b298dc6bf4d2de8db68c5beaf11fd5b4d node-v9.11.2-x86.msi
8c33626a10282e4b19094826bf9c932497563bf93286ca728f72b35e6f9860c9 win-x64/node.exe
902e8984223c2c4e34a2548d1c5f9f58b781f7b1a6401236c4e83268a7090cc2 win-x64/node.lib
2afcd24f40e8bded935b5a8fe3fd218259ce311f80f8a5bd0f6661f03dd4e95b win-x64/node_pdb.7z
6b69110408f0a106ec32241c46570dcd28debb6bb883d20d7964a8c741affc26 win-x64/node_pdb.zip
d045eb4305c20d84a115c7e1d7c68e6822c14f0900ca7ea4b0ad642ea7121015 win-x86/node.exe
3cdb7b4d2c6a49cd7d811ecc3082c071fe511caf7295739f6c6b16994e2010db win-x86/node.lib
ea6c59600915e3006a7d76fd7031986fbf38e1714cdab6eb133bef83ce59ac25 win-x86/node_pdb.7z
9fab06214591a5129808b1ef9f12a9ef9e4b6e0fb03115dbe2dce33fcb55d3c0 win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEua6ZBf/XgD8lcUZhtjtTWkwgbKkFAlsgVsUACgkQtjtTWkwg
bKl6khAAjm0jyHmBkerH9lF4hFUSfC40ngG7/TPXREfxmDge7QzMsaPZYRJpFMYE
O5r5zAy7e/t+4FIr+wpZbUfGzZC5a5Q1/mRxNigGeotoTb5JW3FxxOfkabl/h7dx
0xaZ61aSTotb6jfqnp+6lOktmm4bVLdPSMfW1mhgTa9uMG4Mnlk6V+FCSh+REOzY
FoZL3wqN0nE14PNk8nrwFKkvW3W85sA09qppxOHEJPithepfsSxijltYcr4BChhF
dgQSHn4SiIonIEE5wfxwTmJHqMltJyHkZ0LSl31+5+Hw4NPhUJvg4P0o74UFX6uQ
oUU1U5LX0eYgP1+WSyrQ2EtXTzZXSawOp95vLPYE07H/u9yCbLdY9auUYCLS31CP
lwIHg7qUl6qTARvRgWCJ/U3WSoMaOLeocqxvhjXS+fLkEaf9IJkuGACwjSq7Yshi
DPVX/l33PLLfmKG3/9kIDn43b+pfYYGG0mEMwCSRHCDPrHB8hORolcItucZFA8Nd
G3TdQiZmMQ/VFNkb0GsARAupmoKbVgTzOX4bKLU41Tkq+eSy3UyDbUf58LdQMbqr
WyKkEhXa6aR84UGnF61tCaoFw/7VU2All7iW8k1vHrSUfCq7gYLJiety5KsoS9bB
aAxNDshKZ3tzOOXGuZq++t+xkFZOJGtUeSAq7g011kFK1jWTTDA=
=Ih7m
-----END PGP SIGNATURE-----

Node v10.4.1(현재 버전)

주요 변경사항

  • 메모리 소진 DoS 수정 (CVE-2018-7164): net.Socket 객체를 직접 사용해서 스트림으로 네트워크에서 JavaScript로 읽을 때 소비 메모리가 증가하는 9.7.0에서 발생한 버그를 수정했습니다.
  • http2
    • (CVE-2018-7161): 정리 중 특정 상황에서 크래시가 발생하지 않도록 http2 구현체를 업데이트해서 서비스 거부 취약점을 수정했습니다.
    • (CVE-2018-1000168): nghttp2를 1.32.0으로 업그레이드해서 서비스 거부 취약점을 수정했습니다.
  • tls (CVE-2018-7162): 메시지를 받을 때 크래시가 발생하지 않도록 TLS 구현체를 업데이트해서 서비스 거부 취약점을 수정했습니다.
  • n-api: napi_delete_async_work에서 use-after-free를 막았습니다.

Commits

Windows 32-bit Installer: https://nodejs.org/dist/v10.4.1/node-v10.4.1-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v10.4.1/node-v10.4.1-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v10.4.1/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v10.4.1/win-x64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v10.4.1/node-v10.4.1.pkg
macOS 64-bit Binary: https://nodejs.org/dist/v10.4.1/node-v10.4.1-darwin-x64.tar.gz
Linux 32-bit Binary: Coming soon
Linux 64-bit Binary: https://nodejs.org/dist/v10.4.1/node-v10.4.1-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v10.4.1/node-v10.4.1-linux-ppc64le.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v10.4.1/node-v10.4.1-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v10.4.1/node-v10.4.1-aix-ppc64.tar.gz
SunOS 32-bit Binary: Coming soon
SunOS 64-bit Binary: https://nodejs.org/dist/v10.4.1/node-v10.4.1-sunos-x64.tar.xz
ARMv6 32-bit Binary: https://nodejs.org/dist/v10.4.1/node-v10.4.1-linux-armv6l.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v10.4.1/node-v10.4.1-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v10.4.1/node-v10.4.1-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v10.4.1/node-v10.4.1.tar.gz
Other release files: https://nodejs.org/dist/v10.4.1/
Documentation: https://nodejs.org/docs/v10.4.1/api/

SHASUMS

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

7b35df9310cf11c2c9b2ff27de5acb19ac2f75fc0f8d670da0d05d2a83b84bb2 node-v10.4.1-aix-ppc64.tar.gz
c232241c97e1f4659186205d50b44132e62b61cdc517f1fb86905a21d03e9189 node-v10.4.1-darwin-x64.tar.gz
a5f0148e5aca077295d7c065f1f99adbc0bd4bb31c2c683a134725ecf7d632d3 node-v10.4.1-darwin-x64.tar.xz
f672862be1d9c406a47a38520e9fbf329f48bc9db56cffa62fca76098857725d node-v10.4.1-headers.tar.gz
862f9470cd8aeebe965a3feffd4d97fbe99a47f60494633bdccd152a9c140b80 node-v10.4.1-headers.tar.xz
f61110447544b5ada4b5523b4ccd8a2f5000709e2f9dc6f1f3594f556a068627 node-v10.4.1-linux-arm64.tar.gz
c00b75a28eb69e4238c9d560f50da3652395ba7bfa6e325d5a2b0cd0926070f7 node-v10.4.1-linux-arm64.tar.xz
18093075b38b026a93d4560487d7ce853091835dd58137f04b685ccd9a564746 node-v10.4.1-linux-armv6l.tar.gz
1260aef50e5eb3889429692c55555c4ccd4c49c647ebf2d3be3d19e71e355c0d node-v10.4.1-linux-armv6l.tar.xz
54a3014e2b5baf2d32b99fcd8d5f320457c2f28da79ae7284494df87da042864 node-v10.4.1-linux-armv7l.tar.gz
b10d01061d41e6813e1fa9c3fb52401d67a1fe645ce351fe0c5ad097049eb5b5 node-v10.4.1-linux-armv7l.tar.xz
ebadd3b950a5b4a49827dbd2be1d16e7e21fae98630eaa0372efdae870343fb1 node-v10.4.1-linux-ppc64le.tar.gz
1607290a43a64fb0d02b85b1987e7232b8c95737deec57de82bae6757e9f4bc2 node-v10.4.1-linux-ppc64le.tar.xz
22486e1dd914c3769964d44d192ad46ca474247eb56fbb7f50a3c7efebf8c8a5 node-v10.4.1-linux-s390x.tar.gz
4d3f689fe22ca247cfdca4c73ac3eff87cccf1d88d5d6549fc391d90a94992f9 node-v10.4.1-linux-s390x.tar.xz
1271aa1d889ffe5b9d0ccdb51faabeb60bf27859a5e9401d47f9eead4644991c node-v10.4.1-linux-x64.tar.gz
6196daea2b291cdb865b3597e6b819b13068cb2c9dbf27cb150256c557a81082 node-v10.4.1-linux-x64.tar.xz
2641d8615e82661e12d93b64085928073e04eb0cc7807594b429e732c9e3fd5d node-v10.4.1.pkg
e594895cec32bd62730095d6735fc34d34e05dd3269883d62441dea68db754fd node-v10.4.1-sunos-x64.tar.gz
26c96034ae8f941bf2eb7d8e442fc3e797c01f49f739bf97587bb238bf32cd7b node-v10.4.1-sunos-x64.tar.xz
37f0c44399a0955dafb2162308064382883bbf2e4e8ff2e50aa062b081aad87f node-v10.4.1.tar.gz
a5bf584b52f992b6ce31d8afd8c468945a772431575ad868e4e787f390ad8044 node-v10.4.1.tar.xz
1983061a75ee23c2bd00f817ddf43d0cffca951f5404901527ddfc0bf93f55c6 node-v10.4.1-win-x64.7z
70e0b9f0036f878884fdfc585c1001a439508d1d4e6448c4aced60274a2dc191 node-v10.4.1-win-x64.zip
fcf138fd11f435cfa49d24940365392090251ad04268dbfeb7c2b6dc87579a12 node-v10.4.1-win-x86.7z
19f0739fb72cd029b30ab29e7e7e19849fd936dac41915223ba22d6801f911e1 node-v10.4.1-win-x86.zip
e7aecc7f6682550f988f2363dac908fd42ecd1fba7daa5ab2e7ea054cbb1b9e2 node-v10.4.1-x64.msi
cb4082d7c435bdc17cdbf7ba4af04b7fd88e64978cd872d28486662246b7c949 node-v10.4.1-x86.msi
093244fb6d4c464c710e58ca0a1d1011945b7bf8337c4c45e34a49231e86d69d win-x64/node.exe
8a716197eb364e6fb82e27ef60cbd7464ee33761292e02701b46b5a191a8a42b win-x64/node.lib
75bbbfba8ccb8157f9d3624b4beb032a39017faaca18d6156f11e71d5e2b1ec7 win-x64/node_pdb.7z
cc5cda46cb63dacb91b52aa5d518fdf0690c834ebf635401b1a1048195d9a97b win-x64/node_pdb.zip
02f6df2e1299d1a9369e41e4ca7dc01d0219ad7f7b0dbbea627770a23458843c win-x86/node.exe
03afed5670805f78a70ac9b65edc19b9bf7b7e70132b837a88a2c26979a9f9a1 win-x86/node.lib
92f7dc828d05b28987e0e18aeda0ae8335342eba91a4e69b3cb29a22cc140d91 win-x86/node_pdb.7z
b6681fd9f50b9c66773fa3bcf11560c99d6d9f9c7c95d502b05f5671276e16d9 win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
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=rLAS
-----END PGP SIGNATURE-----

Node v6.14.3(LTS)

주요 변경사항

  • buffer (CVE-2018-7167): 행이 걸릴 수 있는 Buffer.fill()을 호출했을 때의 서비스 거부 취약점을 수정했습니다.

Commits

Windows 32-bit Installer: https://nodejs.org/dist/v6.14.3/node-v6.14.3-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v6.14.3/node-v6.14.3-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v6.14.3/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v6.14.3/win-x64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v6.14.3/node-v6.14.3.pkg
macOS 64-bit Binary: https://nodejs.org/dist/v6.14.3/node-v6.14.3-darwin-x64.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v6.14.3/node-v6.14.3-linux-x86.tar.xz
Linux 64-bit Binary: https://nodejs.org/dist/v6.14.3/node-v6.14.3-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v6.14.3/node-v6.14.3-linux-ppc64le.tar.xz
Linux PPC BE 64-bit Binary: https://nodejs.org/dist/v6.14.3/node-v6.14.3-linux-ppc64.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v6.14.3/node-v6.14.3-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v6.14.3/node-v6.14.3-aix-ppc64.tar.gz
SunOS 32-bit Binary: https://nodejs.org/dist/v6.14.3/node-v6.14.3-sunos-x86.tar.xz
SunOS 64-bit Binary: https://nodejs.org/dist/v6.14.3/node-v6.14.3-sunos-x64.tar.xz
ARMv6 32-bit Binary: https://nodejs.org/dist/v6.14.3/node-v6.14.3-linux-armv6l.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v6.14.3/node-v6.14.3-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v6.14.3/node-v6.14.3-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v6.14.3/node-v6.14.3.tar.gz
Other release files: https://nodejs.org/dist/v6.14.3/
Documentation: https://nodejs.org/docs/v6.14.3/api/

SHASUMS

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

98055f1b91e283c1d050dfbe78f8b7e5e4ae915c5d4c8ff5b3962b0e1b9d72e9 node-v6.14.3-aix-ppc64.tar.gz
9d89a1d951c9097cc8ea824a109591f23b86c96ecf2d277c828fb4de18f30e8c node-v6.14.3-darwin-x64.tar.gz
67abff5c04f6fdb2b28c3b2292bc865b48d562aef5c125b3d175d9935ee3c34b node-v6.14.3-darwin-x64.tar.xz
27f42510182b98a37495a2670869fa675638e270ece3c93f257837262b7ae61f node-v6.14.3-headers.tar.gz
05597f4505bdfa532b5951c8171c1e189196f0ca01e28873ce94b2e655339ca5 node-v6.14.3-headers.tar.xz
07d516d5ba2dca3e66cc034338bd4a68c4c8d3b6c1976feb22c508543f9bffa0 node-v6.14.3-linux-arm64.tar.gz
a596774de40c4e54319880287c150671810946b747b97189e9a60a9a6b8cfa73 node-v6.14.3-linux-arm64.tar.xz
d486352b22ecea78f48e2d99db59effc1c9f2308cf0e55ef57a6b7a2b46b2717 node-v6.14.3-linux-armv6l.tar.gz
06d95058608c09a7f7b3075ee58d66bb9467aad52fc60a6d6e6c28023d7673af node-v6.14.3-linux-armv6l.tar.xz
746b0cbc1cff91b2b43ff4fa8310e96842d51c1c65b8bb0f8e158f23af47132e node-v6.14.3-linux-armv7l.tar.gz
2017cf2abe335dd14928c2a1b75f4b35f57913c5ce31de1f50adcd85a93cb2af node-v6.14.3-linux-armv7l.tar.xz
c1bff8306314f637e99fb5d4c32cbea16586373cdf90e720bb20d25b32e67f35 node-v6.14.3-linux-ppc64le.tar.gz
e0f51db6b5c9746ea611e40b2cf6cdc87a19858bdebaa637bb4e76ec21cf8cc3 node-v6.14.3-linux-ppc64le.tar.xz
4186c8aef2fea3bacf6f428e95438a72ff5aee7f2613b31cf4cd05292874fa6f node-v6.14.3-linux-ppc64.tar.gz
51f6c88b6ad356842dc499b2cc36731142f1f1104f793a4fce4d1b69ccb4572d node-v6.14.3-linux-ppc64.tar.xz
989e2c4e407a83190b90d004e9a03c463104b43a5dd7987f6a5fc8d25fe0027d node-v6.14.3-linux-s390x.tar.gz
1ace62474562f1216e22b0369ccc1fcc904eb71f0ad6dc7f178cf1259ca32313 node-v6.14.3-linux-s390x.tar.xz
28fc7aaf900b8985fd1577b133889d1207505d0f7cf56aac147220a41a1da163 node-v6.14.3-linux-x64.tar.gz
c251152c584e6294f1ef1bd0aaf9cb74a8b0b79db30a4ea254d661fdf3a0f513 node-v6.14.3-linux-x64.tar.xz
da6999ee6e7a6c17e36684bf0447faca61e115669abe98b71c2610f7c49b6601 node-v6.14.3-linux-x86.tar.gz
3d84907b764df8ab5912b5e514d55311763f65fa5369ff7c451558a747c78983 node-v6.14.3-linux-x86.tar.xz
dc5533078a04f8e15f839f471243780e955ef158a54fc1701c550d5072a24f2e node-v6.14.3.pkg
1ebbea1ac7d2218b1a4c7169d85ad7f4363231296cbdb24046972e1d2b3e3175 node-v6.14.3-sunos-x64.tar.gz
9b2ef7b004646981a41444e04b3aa0b00a816fe6f0addbd4bcb002ece0aecca9 node-v6.14.3-sunos-x64.tar.xz
d5db1fb7967d443014d79647cf672b1f726965e111460b6bd0ee9fd8ebcd538b node-v6.14.3-sunos-x86.tar.gz
0486fc370c5ebbda9e55255d649908225c3ab8b5b8d8d5ddce4390336187f027 node-v6.14.3-sunos-x86.tar.xz
378b7b06ce6de96c59970908fc2a67278e1ece22be78030423297bf415c0a8c5 node-v6.14.3.tar.gz
e3f187729f7e4b13d9c053f70cc12717d6e6734e0544cb8ba935aa72d07479c9 node-v6.14.3.tar.xz
c88751b2d426cccf2dcfd19f898f88c2a6bb6a2bd662803ac68f495e19920c04 node-v6.14.3-win-x64.7z
7a7e25aa0d1689ba39daa5b8507c841ce05617c4bff15b49977fb508c435a921 node-v6.14.3-win-x64.zip
afe70a5a1d2fc335822a9c3201a053c454d8f9dd5a025de01466b8abc3c66f63 node-v6.14.3-win-x86.7z
6b417d92e75118d0f1fb40cf32295bbc400dc6a01be6099a97c8ff6fe5e12ea4 node-v6.14.3-win-x86.zip
f67a3f3e24c25859c429fbd576d6d89301c74b5fff70533f4bcc97351df6dc02 node-v6.14.3-x64.msi
01fffeb7d1fc1d5277c3ea212bd4e6e512e463e0a1ee61ca2ffa677dd4256895 node-v6.14.3-x86.msi
7f4412dc101a3abaa6a475943d6549e2802627c1bbe8902c1af01c48509badff win-x64/node.exe
68d9678e47ca58d9ad337dc612d9e6581b20368bc61b42b2fbb0b54960949603 win-x64/node.lib
ee8cc2fe0b98821a1d8e8f9a6ddc0a1b089e5561bdd91c022bd62d04b3556456 win-x64/node_pdb.7z
7724882e342f91080c347d1af9c97dba729ba33dffa5d84c878390f3fc5b8306 win-x64/node_pdb.zip
2a7f0461a7c662ec2657a3964b52e35510db35c3e23fc95caf8fe6ac307dbcce win-x86/node.exe
f92c597184e3d1e0666a04121e48f724e7d22bf29561905c68d084aa01c10416 win-x86/node.lib
ef9368a5a4e7f0bcde405f606d1529e2b3d32c34473eb298b2c9d341e3cc5a61 win-x86/node_pdb.7z
643ae38be3f2feec84acf516f6f3805659832848ddae10839d281b4026620c87 win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
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=OgeT
-----END PGP SIGNATURE-----

Node v8.11.3(LTS)

주요 변경사항

  • buffer (CVE-2018-7167): 행이 걸릴 수 있는 Buffer.fill()을 호출했을 때의 서비스 거부 취약점을 수정했습니다.
  • http2
    • (CVE-2018-7161): 정리 중 특정 상황에서 크래시가 발생하지 않도록 http2 구현체를 업데이트해서 서비스 거부 취약점을 수정했습니다.
    • (CVE-2018-1000168): nghttp2를 1.32.0으로 업그레이드해서 서비스 거부 취약점을 수정했습니다.

Commits

Windows 32-bit Installer: https://nodejs.org/dist/v8.11.3/node-v8.11.3-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v8.11.3/node-v8.11.3-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v8.11.3/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v8.11.3/win-x64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v8.11.3/node-v8.11.3.pkg
macOS 64-bit Binary: https://nodejs.org/dist/v8.11.3/node-v8.11.3-darwin-x64.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v8.11.3/node-v8.11.3-linux-x86.tar.xz
Linux 64-bit Binary: https://nodejs.org/dist/v8.11.3/node-v8.11.3-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v8.11.3/node-v8.11.3-linux-ppc64le.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v8.11.3/node-v8.11.3-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v8.11.3/node-v8.11.3-aix-ppc64.tar.gz
SunOS 32-bit Binary: https://nodejs.org/dist/v8.11.3/node-v8.11.3-sunos-x86.tar.xz
SunOS 64-bit Binary: https://nodejs.org/dist/v8.11.3/node-v8.11.3-sunos-x64.tar.xz
ARMv6 32-bit Binary: https://nodejs.org/dist/v8.11.3/node-v8.11.3-linux-armv6l.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v8.11.3/node-v8.11.3-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v8.11.3/node-v8.11.3-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v8.11.3/node-v8.11.3.tar.gz
Other release files: https://nodejs.org/dist/v8.11.3/
Documentation: https://nodejs.org/docs/v8.11.3/api/

SHASUMS

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

3933bbdbc678cf237072b0429f0552e01c77fe0a6118da907bff81769d2c801e node-v8.11.3-aix-ppc64.tar.gz
77fa26b4c2fc34bdf5a5dd1cd39c93b12087fbd25148c6f04bf409698ee48b86 node-v8.11.3-darwin-x64.tar.gz
7eac0bf398cb6ecf9f84dfc577ee84eee3d930f7a54b7e50f56d1a358b528792 node-v8.11.3-darwin-x64.tar.xz
36bf155f2c42bb3628f146a35fcf2ce812ba29f5d57bbec4780787fe282f9b80 node-v8.11.3-headers.tar.gz
cf42ee988b81b5fd0744f121caa16c7e3fc689137aad66c12eff4d8ac3ebc158 node-v8.11.3-headers.tar.xz
27bbee0710a798f61fab945dc22d4680926d0a679e293f285ff06bb86142b086 node-v8.11.3-linux-arm64.tar.gz
b8fddec18f20533929a07bc1d38ae63b1999a0252740094f0974b2cbea76eaa4 node-v8.11.3-linux-arm64.tar.xz
4e44edd4830159fe026ae2a240308d590e4e3930d794370c2cfcb4c6c1b6db30 node-v8.11.3-linux-armv6l.tar.gz
7eec60b638843f0336759dd6cc6fa236c103ce9a10e137e6a0b3a82bb7e59f9b node-v8.11.3-linux-armv6l.tar.xz
3ab2037f7de2be2021e9b2eccad4a4480f6ec66cad8d7b344ac6a8aeba6908ca node-v8.11.3-linux-armv7l.tar.gz
7a2bb6e37615fa45926ac0ad4e5ecda4a98e2956e468dedc337117bfbae0ac68 node-v8.11.3-linux-armv7l.tar.xz
5c73e55c748c3176746f4e3c278646b44a39e3526c72767a74ce9444165e9e80 node-v8.11.3-linux-ppc64le.tar.gz
6a29ea871e2288dc83d79473bd7b6702a1da126c1a5c900247344252970cb87e node-v8.11.3-linux-ppc64le.tar.xz
3bdb471bbf28478ea82a184193d2fd20d9a5fa5bfe962ecd87a6b4d06a20bd9a node-v8.11.3-linux-s390x.tar.gz
4ba85841c7c31e2846bfaf4346e3c6419e30318bc42677f60bb0d1d5dedebcfd node-v8.11.3-linux-s390x.tar.xz
1ea408e9a467ed4571730e160993f67a100e8c347f6f9891c9a83350df2bf2be node-v8.11.3-linux-x64.tar.gz
08e2fcfea66746bd966ea3a89f26851f1238d96f86c33eaf6274f67fce58421a node-v8.11.3-linux-x64.tar.xz
7fe0d547baaa6334c1b14cfad8f4dc707b58b3568659b7466894ff26030944e5 node-v8.11.3-linux-x86.tar.gz
79fc372d8cb2d9d352bad00ae6630994fde802767fafff2dc411f37a3e84a5d3 node-v8.11.3-linux-x86.tar.xz
e4c21b34356cc734034d6b19431e8c4d191b3eac698cad23b75dc99bf34398f9 node-v8.11.3.pkg
a49a53d12385eb841e49091c6b94bc38c1bf9696ddc5f41ae30f5b4c829b0892 node-v8.11.3-sunos-x64.tar.gz
04f0fe764f6b6ca6a2dfa9d868ca6df4986fd215c344f2e06d06a005516eb11e node-v8.11.3-sunos-x64.tar.xz
93bf636a0bcbfd4d95c3e9686a8e16b3c99e4fe8f6dda13e746e7745ea6d5bab node-v8.11.3-sunos-x86.tar.gz
b78288b650e025916087847158185cee41cbbd644fe110b97197870f87873b50 node-v8.11.3-sunos-x86.tar.xz
0d7e795c0579226c8b197353bbb9392cae802f4fefa4787a2c0e678beaf85cce node-v8.11.3.tar.gz
577c751fdca91c46c60ffd8352e5b465881373bfdde212c17c3a3c1bd2616ee0 node-v8.11.3.tar.xz
87ea95cef11a0c840556a164a664917ddaebde76e2dac6607c519d56ea68d5f8 node-v8.11.3-win-x64.7z
91b779def1b21dcd1def7fc9671a869a1e2f989952e76fdc08a5d73570075f31 node-v8.11.3-win-x64.zip
df3649ce8fed94c474491d378f1385b949a6208d2f6a6b4097e081ab55501c4e node-v8.11.3-win-x86.7z
9482a0ad7aa5cd964cbeb11a605377b5c5aae4eae952c838aecf079de6088dc6 node-v8.11.3-win-x86.zip
d7e3057e921803159266ff1340283420a3e5053bad0c3ff951d8946a8f9aa66b node-v8.11.3-x64.msi
66d1750f03f9319312843e8e80764625c8157600c1add99cba92c783cf9ff02a node-v8.11.3-x86.msi
8ec35e8b61e08e3c09547ab52101e480285761baa9d35d707866540942ae0b0d win-x64/node.exe
dd212906d408a23a1e7f32ab67c962aac33ed911b591d482cb37df390d536d48 win-x64/node.lib
ee8480f5c41973b41abc95fdd8cd2034a7484f5979d174a217d041da86464a12 win-x64/node_pdb.7z
80279ed44f5e4a332d36060078632af8723d0935eddda4b1a7a1e97a121d53fa win-x64/node_pdb.zip
e7a5aa4d5b06aba4ab68a4c57d899800550cd05428ab1d74336170b98c4fe96a win-x86/node.exe
244daecad206b29215dfaab70bb73eb56f48f43c780ba4b70d0bf0046f9514f2 win-x86/node.lib
bac3cfe70b1c4802bc2b751ba7d1e860769c2899018ed81c9f47fc045a7d5a16 win-x86/node_pdb.7z
aba100bac88199c457dec75571a2078b1ec3ee57670587cd0c12ce5a3fed9c4c win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
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=Lz/E
-----END PGP SIGNATURE-----